☘️ { 𝔖𝔠𝔞𝔯𝔩𝔢𝔱𝔱𝔞'𝔰 𝔏𝔬𝔲𝔫𝔤𝔢 } ☘️
Закрытый канал
🧪 𝕋𝕌𝕋𝕆ℝ𝕀𝔸𝕃𝕊 𝔸𝔹𝕆𝕌𝕋 𝔼𝕍𝔼ℝ𝕐𝕋ℍ𝕀ℕ𝔾🧪 You search how to setup windows on VM, what credit reports are or how checks work? We show you practical ones to understand ⚠️ Unauthorized advertisments in comments will lead to a ban from channel :)
БольшеНет данных
Подписчики
+724 часа
+657 дней
+16630 дней
Архив постов
Phemedrone Stealer Version 2.3.2 OpenSource
Features:
Stealer gathers all data in memory
No external libraries are used for Phemedrone Stealer
Stub size is ~80 kB
Works on both x32 and x64 systems
All logs get sent to an HTTP Host
Configurable Anti CIS, Anti VM, Anti Debbuger and Mutex
Configurable File grabber file extensions and search depth
Grabbing Cookies, Passwords, Autofills and Credit cards from Chromium-based browsers (using dynamic path searching)
Grabbing Cookies, Passwords and Autofillsfrom Gecko-based browsers (using dynamic path searching)
Grabbing Telegram, Steam and Discordsessions using dynamically path searching
Grabbing sensitive Extensions from Chromium-based browsers (includes crypto-extensions and authenticators)
Grabbing most known Crypto wallets
Detailed System information which includes hardware, geolocation and OS information with a Screenshot
🔥 HOW TO DECODE PHP FILES PART 2 🔥
✖️Decoded Files : 16short Admin Page ✖️
🕔 Time : 29 minutes
💬 Type Of Obfuscation :
__halt_compiler(); and 4 stages.
🗣 Recorder : @scarlettaowner
📅 Recorded at : 23.05.2021This one is still obfuscated - i will send a video how to deobfuscate and i upload it when deobfuscated.
In 2020, we unpacked all 16shop pages except the sender. The sender used a API which returns the script from a valid license check of his server - sadly
👩💻
redirector_cracker.zip = Certified Useless
📦 Contents: 0x00 repeated 7.950.513 times
🧠 Result: No MZ header, no shellcode, no embedded strings, no entropy, not even a decent attempt at obfuscation.
Next time when you try to share malware, build it correctly so that I have something to do and have fun.
@alwaysgoodfr🧯
zoominvite.exe = Certified Useless
📦 Contents: 0x00 repeated 8,192,000 times
🧠 Result: No MZ header, no shellcode, no embedded strings, no entropy, not even a decent attempt at obfuscation.
Next time when you try to share malware, build it correctly so that I have something to do and have fun.
@techruuAutoLog Keylog [Source Code] 👩💻
💎 Features of the Source Code
▶️ stub.au3: Dropper that extracts
AutoUpdate.exe, Emai.exe, Scre.exe to C:\ProgramData\Skype, downloads LaZagne.exe for credential dumping, collects system info (Antivirus, antivirus, OS, CPU, IP), sets persistence, bypasses UAC, disables antivirus (244+ processes), and clears browser data.
▶️ Emai.au3: Sends log files (Passwords.txt, Info.txt, logs_*.htm) from C:\ProgramData\Skype via Gmail SMTP, deletes logs after sending, runs silently with admin privileges.
▶️ Scre.au3: Captures desktop screenshots and webcam images using DirectShow, sends them via Gmail SMTP, deletes files after sending, runs stealthily.
▶️ Main.au3: Nearly identical to Scre.au3, captures screenshots and webcam images, likely the source for Scre.exe.
▶️ All scripts use obfuscation, run silently (#NoTrayIcon), and require admin privileges (#RequireAdmin). Outputs are saved to C:\ProgramData\Skype (stub.au3, Emai.au3) or C:\Windows\log (Scre.au3, Main.au3).
❌ Leecher ? Be smart and ask for promotions instead of getting a ban! 🧠
🔻 Share And Support Channel🔻
https://t.me/+ZFUM798YLi5mODUy🧾 Prerequisites
To compile and run this C# program, you need:
✅ Option 1: .NET SDK / Visual Studio Developer Command Prompt
▶️Install .NET SDK or
▶️Use Visual Studio with the Developer Command Prompt
✅ Option 2: Use
csc.exe from Windows
* Comes with .NET Framework (on most Windows systems)
* Path: C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe
🔧 Compilation
1️⃣ Save the Code
Create a new text file, e.g., Program.cs, and paste the full C# code into it. Replace:
string token = "";
string chatId = "";
with your actual Telegram bot token and chat ID.
2️⃣Open CMD / PowerShell
Navigate to the directory where Program.cs is saved.
3️⃣Compile with CSC
"C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe" /target:exe /platform:x86 /optimize Program.cs
✅ This creates a file: Program.exe in the same folder.
If you're on 64-bit Windows, you can also try:
"C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe" /target:exe /platform:x64 /optimize Program.cs
4️⃣ Run the Program
Now just execute the program:
Program.exe
🔴No window will open.
🔴No file will be saved.
🔴Screenshot is sent silently via Telegram.
💎 Features of the source code:
✅ Silent execution
🖼 Screenshot functionality
🖼 Telegram upload
💾 No file saved locally
🔄 Error fallback
🛠 Embedded Win32 calls