Skip to content

Source code of the Yashma Ransomware, also known as Ryuk and Chaos.

Notifications You must be signed in to change notification settings

HeightCoder/Yashma-Ransomware

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 

Repository files navigation

Yashma Ransomware

Complete source code of Yashma Ransomware.

❓ 〢 About

🗨️ Yashma is an popular closed-source ransomware builder formerly known as 'Ryuk' and 'Chaos'.
It encrypts every file with AES-RSA and comes with several malicious toggleable features.

🔔 The binaries code has been decompiled and fixed to its original state, making it moddable.
Because of that, you no longer need to pay the author to get any kind of source.

⚠️ The stub for this ransomware has a clipper function that replaces certain crypto address.
It's not very documented, but you can remove this code yourself in the project files.

🎥 〢 Proof

Build.mp4

📸 〢 Screenshot

Yashma

⚜️ 〢 Features

  • Stop Backup and Antivirus Services
  • Disable Windows Recovery Mode
  • Change desktop wallpaper
  • Resist for admin privileges
  • Delay before encrypting
  • Disable Task Manager
  • Delete Shadowcopies
  • AES-RSA encryption
  • Spread via Drives
  • Add to Startup

💵 〢 Donate

BTC: bc1qk7q3m5spctnevttzwsyv9n3fpmcc04s9nruhjz

💬 〢 Disclaimer

This project was made for educational purposes only.
I am not responsible if you choose to use this illegally/maliciously.