+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Premium (https://hackforums.net/forumdisplay.php?fid=451)
+---- Forum: Premium Sellers Section (https://hackforums.net/forumdisplay.php?fid=107)
+---- Thread: Shit Stealer v.2.01 - The Primo Stealer [PHP LOGGING] [$12.00!] (/showthread.php?tid=346946)
* - Yin - Apr 2, 2010
Told Razzle to add you.
* - brownie912 - Apr 2, 2010
awesome thanks guys.
* - iRtehLeet™ - Apr 2, 2010
(Apr 2, 2010 03:24 PM)Yin Wrote: Contact Razzle for right now, as he's on.
Leet, the stealer uses drops on some, most of them no.
Alright thanks for info, also you shouldn't claim its 100% fud when drop usage isn't 100% runtime, its kind of lying to customers. 😝
* - Phіus - Apr 2, 2010
(Apr 2, 2010 04:10 PM)iRtehLeet™ Wrote: Alright thanks for info, also you shouldn't claim its 100% fud when drop usage isn't 100% runtime, its kind of lying to customers. 😝
Actually, if the drop is executed in memory then it is undetected and runtime FUD.
* - iRtehLeet™ - Apr 2, 2010
(Apr 2, 2010 04:14 PM)DarkSel Wrote: Actually, if the drop is executed in memory then it is undetected and runtime FUD.
Yes thus acting as a runtime crypter does, but we all know that isn't the case here in a vb.net stealer. (Source = Drop in temp and run from resources).
* - Phіus - Apr 2, 2010
(Apr 2, 2010 04:16 PM)iRtehLeet™ Wrote: Yes thus acting as a runtime crypter does, but we all know that isn't the case here in a vb.net stealer. (Source = Drop in temp and run from resources).
I've seen a couple of stealers using Japabrz's RunPE module for drops.
* - iRtehLeet™ - Apr 2, 2010
(Apr 2, 2010 04:18 PM)DarkSel Wrote: I've seen a couple of stealers using Japabrz's RunPE module for drops.
Wouldn't work under win7/vista ~_~.
* - JacK GoT HiT - Apr 2, 2010
looks good yin gr8 job dude. :)
* - Yin - Apr 2, 2010
Well, Razzle coded it.
* - South Park - Apr 2, 2010
Drops firepass.exe for firefox passwords. Detected by almost every antivirus =(
* - ODDSAC - Apr 2, 2010
(Apr 2, 2010 04:41 PM)M0D3RN H4X3R 2™ Wrote: Drops firepass.exe for firefox passwords. Detected by almost every antivirus =(
from about 100 sets of logs ive received from the last 2 days theres been no AV popups anywhere (from the screenshots it provides) and most of my victims have AVG/MalwareBytes installed
* - Yin - Apr 2, 2010
If you're not interested in buying or giving comments/suggestions, then don't buy.
* - Phіus - Apr 2, 2010
(Apr 2, 2010 04:26 PM)iRtehLeet™ Wrote: Wouldn't work under win7/vista ~_~.
Not true. Some easy modification to the file structure can be made to Japabrz's RunPE or you could write your own using common headers.
* - anorexic - Apr 3, 2010
Bought about 2 weeks ago. Probably best KL ever used and support is A+. Thanks Razzle.
* - Yin - Apr 3, 2010
Glad you like it anorexic.