Thor

Thor is a ransomware.
It uses RSA-2048 with AES-128 to encrypt files.

For educational purposes

This software is STRICTLY for educational purposes.

How to stay safe while playing with this code?

DO NOT uncomment the lines within payload/agent/lib/file_finder.py By default, it will only encrypt files within a folder in your desktop named Target_Folder
Warning: Do not run this code on your PC, use a VM instead. And If you do run it, let it run all the way.

Notice:

I will not be responsible for your actions. DO NOT touch this code if you lack self-control.

For your protection

For your own protection this ransomware will only encrypt files within a folder named Target_Folder within your desktop. You can tell it lock all files by uncommenting a few lines within payload/agent/lib/file_finder.py

Requirements

Python 3.6.x | 3.7.x

Usage with a VM

Uncomment the commented out section of payload/agent/lib/file_finder.py
Generate server's public key pair python thor.py
Change directory into payload directory
Run the encryptor_generator.py
Infect your VM with the exe
Get the encrypted RSA private key that the exe outputs from your VM
Change directory back into payload directory
Run the decryptor_generator.py and give it the RSA keys
Send the decryptor.exe to the VM
Let the decryptor run and decrypt the files within your VM

No sharing

Each time you generate an ransomware, you must generate a decryptor for that ransomware. You cannot generate one decryptor and use it with differently generated ransomware.

Example usage

Install requirements
```
pip install -r requirements.txt
```
Generate server's public key pair
```
python thor.py
```

Change directory into payload & generate a ransomware

python encryptor_generator.py -b mybtcadress -a 120 -k ../server/keys/public.pem -n virus_danger

Change directory into payload & generate a decryptor

python decryptor_generator.py -sk ../server/keys/private.key -vk encrypted_private.ekey -n decryptor

Disclaimer

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE

AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,

OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

SOFTWARE. THIS SOFTWARE IS PURELY FOR EDUCATIONAL PURPOSES.

Bitwise-01 / Thor