TeslaCrypt 2.0 Code

[JM Safe]

LINK: http://www.infosecdailynews.com/teslacrypt-2-0-disguised-as-cryptowall/

Hi everyone, in this thread I want to post part of code of this dangerous ransomware.

Key data saved in system:

And this should be the same code in C language:

Infected system:

File encryption:

And this should be the same code in C language

Evading detection:

C&C communication:

 

[Kate_L]

Very good, can you add the sample too ?

 

[Enju]

Huh? Aren't those exactly the same screenshots Kaspersky posted on their blog?

 

[JM Safe]

Very good, can you add the sample too ?

It isn't easy to find a sample of TelsaCrypt 2.0

 

[LabZero]

Hi everyone, in this thread I want to post part of code of this dangerous ransomware.

Key data saved in system:

And this should be the same code in C language:

Infected system:

File encryption:

And this should be the same code in C language

Evading detection:

C&C communication:

Can you add source ?

 

[JM Safe]

Huh? Aren't those exactly the same screenshots Kaspersky posted on their blog?

Can you add source ?

Thread updated

 

[LabZero]

Thread updated

Thanks for info link @Jo Man

 

[Moose]

Salutations,

Are there any AV's solutations, that stop this headcahe?
And clean TeslaCrypt 2.0 Code off of your PC?

What about Cryptoprevent,Sandboxie, Shadow Defender and Toolwiz Time Free.
Can they stop the above?

Kind regards,

 

[Cch123]

You plagiarized the whole thing from Kaspersky, you should at least link to the original article here: https://securelist.com/blog/research/71371/teslacrypt-2-0-disguised-as-cryptowall/
as @Enju has mentioned and not this

LINK: http://www.infosecdailynews.com/teslacrypt-2-0-disguised-as-cryptowall/

which itself was not even present when you first posted. I don't want to speculate why you do not want to link directly to the original source even though Enju has mentioned "Kaspersky", but instead choose to update your post with a source that reposted from Kaspersky. I think it will do the original author more justice if you link directly to his article.

 

[JM Safe]

You plagiarized the whole thing from Kaspersky, you should at least link to the original article here: https://securelist.com/blog/research/71371/teslacrypt-2-0-disguised-as-cryptowall/
as @Enju has mentioned and not this

which itself was not even present when you first posted. I don't want to speculate why you do not want to link directly to the original source even though Enju has mentioned "Kaspersky", but instead choose to update your post with a source that reposted from Kaspersky. I think it will do the original author more justice if you link directly to his article.

Your comment is useful LOL
With regards, Jo Man

 

[JM Safe]

Salutations,

Are there any AV's solutations, that stop this headcahe?
And clean TeslaCrypt 2.0 Code off of your PC?

What about Cryptoprevent,Sandboxie, Shadow Defender and Toolwiz Time Free.
Can they stop the above?

Kind regards,

Wow a lot of questions
Anyway the most advanced AVs can block TeslaCrypt 2.0, as the version 2.0 is less
easy to detect then the first version of the malware.
To ask your last question in my opinion is difficult to say if these programs can block completely the malware, I hope yes, but I'm not sure.
Anyway sometimes ago I watched a video that showed these type of software can block the virus, because it is isolated from the real system.
Regards,

Jo Man

 

[Moose]

Salutations, Friends!

http://malwaretips.com/threads/teslacrypt-2-0-vs-comodo-firewall.48745/