![]() |
|
#6
|
|||
|
|||
|
From my analyzes of the ransom globeimposter, this ramsoware uses RSA-2048 and AES-128, as far as I know there is no plain text attack of AES-128, and AES key is just some random bytes initialized at execution time; and the key will differ on each run.
So still don't know how the decryption is possible. |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Tomahawk's Source Code Paradise | TomaHawk | Source Code | 16 | 02-20-2017 21:49 |
| VB6 N-CODE - Stop any servive and Start any APP-Release and Source Code | wilson bibe | General Discussion | 5 | 04-10-2013 00:23 |