VanHelsing Ransomware [Source]

[pinkman]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:

To view the content, you need to Sign In or Register.

 

[Studio91]

+

 

[Glen_GaleGG]

ok

 

[Brythan]

best

 

[aleatorio_]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

top

 

[fds123]

ok

 

[blackmamba]

Nice leak and dump

 

[olum11]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

 

[olum11]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

 

[olum11]

..

 

[secretlegend]

Thxs

 

[retrohaxxx %]

thanks

 

[swisherman7]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

nnn

 

[valinebun]

!

 

[Baybefire]

与 VanHelsing 勒索软件即服务 (RaaS) 相关的勒索软件。它使用 C++ 编写，接受多个命令行参数来控制加密过程，例如是否加密网络和本地驱动器，或者是否加密特定目录和文件。VanHelsing 最近被泄露，该软件本身售价 1 万美元。

特征

跨平台：攻击 Windows、Linux、BSD、ARM 和 VMware ESXi（目前仅在 Windows 系统上确认过攻击案例）。加密：使用 ChaCha20 和 Curve25519 算法，对大文件进行部分加密，文件扩展名为 .vanhelsing。

双重勒索：加密文件并威胁泄露数据。

隐身模式：“静默”模式，删除卷影副本，更改壁纸，可通过命令行进行灵活设置。
下载：*** 隐藏文本：无法引用。 ***

t

 

[ff3kv]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

dd

 

[concha_11]

ok

 

[jumperk]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***

thanks

 

[spencer808]

This is good stuff for research

 

[kibidzi]

Ransomware related to VanHelsing RaaS. Written in C++, it accepts several command line arguments that control the encryption process, such as whether to encrypt network and local drives or specific directories and files. VanHelsing was recently leaked, the software itself cost $10,000.

Features

Cross-platform: Attacks Windows, Linux, BSD, ARM, VMware ESXi (only confirmed cases on Windows). Encryption: Uses ChaCha20 and Curve25519, partial encryption for large files, .vanhelsing extension.

Double blackmail: Encrypts files and threatens to leak data.

Stealth: "Silent" mode, delete shadow copies, change wallpaper, flexible settings via command line.
download:*** Hidden text: cannot be quoted. ***