Skip to content

Round 2 of the TryToStopIt series: 100% cpu-usage guaranteed! (Made with V)

License

Notifications You must be signed in to change notification settings

bstnbuck/TryToStopIt-2

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Try To Stop It -- Part 2

Attention! Use of the code samples and proof-of-concepts shown here is permitted solely at your own risk for academic and non-malicious purposes. It is the end user's responsibility to comply with all applicable local, state, and federal laws. The developer assumes no liability and is not responsible for any misuse or damage caused by this tool and the software in general.

Requirements

  • Installed V-Compiler
  • Windows OS (test environment)

Usage

  • Download the binaries or clone the repository and follow these steps:
    1. build endless.v with v endless.v
    2. use tob64.v to get the base64 string of the generated binary (v run tob64.v)
    3. paste the base64 string as one line into the code and compile it (v tryToStopIt.v)

What it is and how it works

The malware has a strong DoS behavior. It launches endless loops, which in turn launch endless new threads, which endlessly create new files and execute them. !Test this only in a virtual machine! To create the symlink for Autostart, run tryToStopIt.exe elevated.

  • tryToStopIt.exe -> creates symlink in Autostart, executes endless creation and execution of endless.exe
  • endless.exe -> endless thread creation, count to infinity in each of them.
  • tob64.v -> if code of endless.v is changed, get the new base64 string