Viewer Made Malware 14 - Cockblocker (Win32)

Viewer Made Malware 14 - Cockblocker (Win32)

Cockblocker is a ransomware trojan on Microsoft Windows made for danooct1's Viewer-Made Malware series. When run, it starts a memory process, and starts to encrypt files. After encrypting all the files, it runs a message box, telling you:

Yo file's been encrypted n*gga, pays me a bitcoin and I'll uncrypt them fam

Note that the message above is censored.

Also it displays a message that changes any time you run the ransomware. Example:

like I'd become a monster...

It gives a list to you that shows the encrypted files. It has a Bitcoin address, and the price of decryption is one bitcoin.

It does have a decryption key, which is:


It also has a cmd running behind the message box. If you try to close the display box, it will display another message box that says:

are you sure you wanna do that???!

If you click 'No', it just closes the warning box. If you click yes, it will delete the process of the display box, with all the encrypted files.

Even though this ransomware was only meant for danooct1, the creator made the mistake of publishing it on a social media website, consequently allowing outside sources other than danooct1 to be able to put it out into the wild.