Ransomware Encryption Analysis Tool

Ransomware Encryption Analysis Tool

Analysis forense of samples of ransomware for identifying debilidades cryptographic:

n
• Crypto identification — Identifica the algoritmo (AES, ChaCha20, RSA), modo (CBC, CTR, GCM), and key derivation usesdos by the shows.
n
• Key recovery — Busca keys in memory (memory dump), in the binario (hardcoded), or in files temporales that the ransomware no cleaned.
n
• IV/Nonce analysis — Detecta reuse detection of IV/nonce (error common in ransomware amateur) that allows decrypted parcial.
n
• Partial encryption — Identifica if the ransomware encrypts files completes or only the primeros N bytes (allows recovery parcial).
n
• Known ransomware DB — Base of data of 200+ familias of ransomware with its schemes cryptographic and tools of decrypted conocidas.
n