From 47ea8e28ac50e397bfa6b88c84e893ab6c4107b4 Mon Sep 17 00:00:00 2001 From: GRX78FL Date: Wed, 21 Dec 2022 12:45:03 -0500 Subject: [PATCH] Added DJB2 variant of Vohuk randomware --- algorithms/djb2_vohuk_ransomware_dec_2022.py | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 algorithms/djb2_vohuk_ransomware_dec_2022.py diff --git a/algorithms/djb2_vohuk_ransomware_dec_2022.py b/algorithms/djb2_vohuk_ransomware_dec_2022.py new file mode 100644 index 0000000..cb383be --- /dev/null +++ b/algorithms/djb2_vohuk_ransomware_dec_2022.py @@ -0,0 +1,15 @@ +#!/usr/bin/env python + +DESCRIPTION = "Vohuk Ransomware's variant of DJB2 as of December 2022" +TYPE = 'unsigned_int' +TEST_1 = 1274984080 + + +def hash(data: bytearray) -> int: + hash = 0x1505 + for b in data: + if ((b - 0x41) & 0xFFFFFFFF) < 0x20: + b += 0x20 + hash += b + ((0x20 * hash) & 0xFFFFFFFF) + hash &= 0xFFFFFFFF + return hash