search

mauri870 / ransomware

A POC Windows crypto-ransomware (Academic). Now Ransom:Win32/MauriCrypt.MK!MTB
857 stars 413 forks source link

hide encrypted files till encryption finished and storage capacity issue #31

Open krazyjay opened 6 years ago

krazyjay commented 6 years ago

Hi Mauri, Thanks for awesome project. I tried locally and it did work but I can foresee some concern. First of all I could see that I have encrypted file along with original. So it would be obvious that anyone infected could see that which is not good idea. I mean probably I didn't wait till it finish encrypting all file and hence I could see them as once all encryption finishes, only encrypted files left behind deleting originals? Am I correct? if not then how can we hide encrypted files until we finish with encryption?

Second is that If originals will be there till encryption finish and if there is not enough storage then our operation will crash and fails. Am I correct?

please can you look at this please. Thanks bro in advanced and keep it up good work. Jay

AlistairXX commented 6 years ago

I have the same issues related to our rules of engagement.