Skip to content

Custom ransomware file extension #1242

@mssalvatore

Description

@mssalvatore

Description

As a red team member, I want to be able to configure the file extension that the ransomware simulation uses to rename encrypted files, so that I can more accurately mimic specific ransomware threats.

Acceptance Criteria

  • Encrypted files are renamed with a user-provided extension. (Default: ".m0nk3y")
    • Example: my_picture.jpg -> my_picture.jpg.m0nk3y
  • None/empty is a valid extension. The ransomware payload will not rename files if no extension is provided.
  • Any files that already have the user-provided extension are skipped.
  • Ransomware configuration screen includes a field that allows the user to specify a file extension.
  • Unit tests are written and provide comprehensive coverage.
  • Documentation is written that describes how the file extensions are used.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions