diff --git a/algorithms/djb2_vohuk_ransomware_dec_2022.py b/algorithms/djb2_vohuk_ransomware_dec_2022.py new file mode 100644 index 0000000..cb383be --- /dev/null +++ b/algorithms/djb2_vohuk_ransomware_dec_2022.py @@ -0,0 +1,15 @@ +#!/usr/bin/env python + +DESCRIPTION = "Vohuk Ransomware's variant of DJB2 as of December 2022" +TYPE = 'unsigned_int' +TEST_1 = 1274984080 + + +def hash(data: bytearray) -> int: + hash = 0x1505 + for b in data: + if ((b - 0x41) & 0xFFFFFFFF) < 0x20: + b += 0x20 + hash += b + ((0x20 * hash) & 0xFFFFFFFF) + hash &= 0xFFFFFFFF + return hash