FANDOM


DoggeWiper is a ransomware -type virus that runs on Microsoft Windows. The original name is still debatable as malware authors use several other titles in their notes, such as Powerhentai or Idiot ransomware, which only confirms that the threat is not properly developed.

Payloads

Instead of encrypting data with a strong algorithm, DoggeWiper ransomware changes the structure of each file so that it would instead open RacWmiDatabase.sdf.txt file (which is also a ransom note), which contains a vulgar text, filled with swearwords and an ASCII Text Art picture of a well-known Doge meme. 

One DoggeWiper ransomware settles, it installs multiple new files, executes services, modifies Windows Registry, and performs many other operations that increase threat's persistence on the device and possibly prevent DoggeWiper ransomware removal. After the encryption, each file is modified in the following way: picture.jpg is turned into picture.jpg.vscode. From that time, each time the victim clicks on one of such files, a RacWmiDatabase.sdf.txt is opened instead, which contains the following text (censored):

my name is tostring and your pc is now f*cked
f*ck you pain exist you f*cking n*gger
now go f*cking cry to your skid friends and your skid followers/fans about how your pc just died megalul

────────▌▒█─────────── ▄▀▒▌ 
────── ──▌▒▒▀▄───────▄▀▒▒▒▐ 
───────▐▄▀▒▒▀▀▀▀▄▄▄▀▒▒▒▒▒▐ 
──── ─▄▄▀▒▒▒▒▒▒▒▒▒▒▒█▒▒▄█▒▐ 
───▄▀▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▀██▀▒▌ 
── ▐▒▒▒▄▄▄▒▒▒▒▒▒▒▒▒▒▒▒▒▀▄▒▒▌ 
──▌▒▒▐▄█▀▒▒▒▒▄▀█▄▒▒▒▒▒▒▒█ ▒▐ 
─▐▒▒▒▒▒▒▒▒▒▒▒▌██▀▒▒▒▒▒▒▒▒▀▄▌ 
─▌▒▀▄██▄▒▒▒▒ ▒▒▒▒▒▒░░░░▒▒▒▒▌ 
─▌▀▐▄█▄█▌▄▒▀▒▒▒▒▒▒░░░░░░▒▒▒▐ 
▐▒▀▐▀▐▀ ▒▒▄▄▒▄▒▒▒▒▒░░░░░░▒▒▒▒▌ 
▐▒▒▒▀▀▄▄▒▒▒▄▒▒▒▒▒▒░░░░░░▒▒▒▐ 
─▌▒▒▒▒▒▒▀▀▀▒▒▒▒▒▒▒▒░░░░▒▒▒▒▌
─▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▐ 
──▀▄▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▄▒ ▒▒▒▌ 
────▀▄▒▒▒▒▒▒▒▒▒▒▄▄▄▀▒▒▒▒▄▀ 
───▐▀▒▀▄▄▄▄▄▄▀▀▀▒▒▒▒ ▄▀
──▐▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▀▀ 

wow such beutiful files
such wow
made by minecraft master and tostring
Community content is available under CC-BY-SA unless otherwise noted.