INFORMATION

Contact

• Email: [email protected]
• Telegram: @Darxis
• Jabber: [email protected]
• HackTheBox: https://www.hackthebox.eu/profile/37928

Directories

• ./BIN - Compiled files
• ./SOURCE - Source code
• ./TEST_DISK - Drive image
• ./TOOLS - Compiler and additionally utilities
• ./CRYLINE_COMPILER - Simple Windows command line script for autocompile

Files

• ./SOURCE/encryptLoader.asm - First MBR
• ./SOURCE/driveEncryption.asm - Encryption module [THIS CIPHER IS VERY WEAK! It was used only for testing!]
• ./SOURCE/bannerLoader.asm - Second MBR
• ./SOURCE/bannerKernel.asm - Banner that is displayed after drive encryption

Dropper

This's a simple malware for writing files to drive.

• First 512 bytes of hard drive - encryptLoader.bin
• Second 1024 bytes of hard drive - bannerKernel.bin
• Third 1024 bytes of hard drive - bannerLoader.bin
• Fourth 512 bytes of hard drive - bannerLoader.bin