Have been searching ransomware source codes for analysis(as much as possible). I have already checked with sites like Any.Run but most of their samples are .exe and binary files. Does any one have any leads to a place I can get the source codes especially for ransomware?

  • 1
    I’m voting to close this question because we're not a VX site. Sep 19 '20 at 4:49
  • In addition to Peter's remark there is nothing that has to do with reverse engineering in this question. It's more along the lines of software development, even though you claim it's just for analysis.
    – 0xC0000022L
    Sep 21 '20 at 19:18

Here are some links you may find helpful:

You can also look for MSIL binaries, deobfuscate using de4dot and decompile using dnSpy. If sample is not strongly protected, you will get output as readable as the source code.


Nobody is going to publish their source code for active ransomware, there are various reasons for that:

  • Its a business and the author makes money from it, and by giving away the source code there is a competitor. Of course that is not wanted
  • It is possible that someone will find weaknesses, obviously that is possible for binaries aswell but usually it's easier with the source code, that could allow decryption without paying
  • If it's "only for educational purposes" it will get abused. I'm 100% sure on that one, so this has to be considered aswell

A few years ago I saw a sample ransomware on GitHub, maybe that is a good starting point.

Not the answer you're looking for? Browse other questions tagged or ask your own question.