+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Bazaar (https://hackforums.net/forumdisplay.php?fid=450)
+---- Forum: Marketplace Discussions (https://hackforums.net/forumdisplay.php?fid=163)
+---- Thread: [Community Alert] HF Spreader. UID=2659060 (/showthread.php?tid=4744812)
Pages: Pages
1
2
HF Spreader. UID=2659060 - .Odin - Mar 23, 2015
Name: CreateChaoss
UID: 2659060
Skype: createchaoss
This kid is posting threads saying add me on Skype.
After you add him he will continue to send you his stub over and over until you download it.
I downloaded the file which is only 1mb and labeled "Counter Strike GO Aimbot"
I ran it on a RDP and watched as the network usage shot up.
I scanned the file the results are below:
Spoiler (Click to View)
* - Talon - Mar 23, 2015
Why didn't you just scan it first before running it on anything :p
* - .Odin - Mar 23, 2015
I scanned it then a ran the file.
I wanted to make sure.
* - Jeremiah † - Mar 23, 2015
Why do people even try this anymore lol..
* - GenericSkid - Mar 23, 2015
Why do people still use darkcomet? It's 2015 people. Get something that doesn't get detected even with the best crypterd on the market.
* - Young Nino - Mar 23, 2015
What a fucking skid I can vouch for this, dumbass didnt even crypt his RAT lol.
* - .Odin - Mar 24, 2015
(Mar 23, 2015 08:36 PM)Lord Pankake Wrote: Why do people still use darkcomet? It's 2015 people. Get something that doesn't get detected even with the best crypterd on the market.
I know right I use Babylon. People need to modernize.
* - CreateChaoss - Mar 24, 2015
i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.
* - Sogomn - Mar 24, 2015
(Mar 24, 2015 03:21 PM)CreateChaoss Wrote: i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.
Ah. They will definitely help you after you've sent them your "CS GO Aimbot".
* - w34k - Mar 24, 2015
(Mar 23, 2015 08:32 PM)ރVirusScanރ Wrote: I scanned it then a ran the file.
I wanted to make sure.
Why even run it ? Lol, just look at the 'Behavioural Information' on VirusTotal. You can clearly see his no-ip host and IP. 🤦♂
* - MrKamarJ - Mar 25, 2015
(Mar 24, 2015 03:21 PM)CreateChaoss Wrote: i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.
LMFAOOOOOO! OH MY GOSH, THIS COMMENT IS AMAZING! I needed that laugh lol!
The way you went about it, you now sure do have a lot of "friends".
Cheers
* - Teen La Queefa - Mar 25, 2015
Cracked up looking at the behavioral , first he tried using cyber ghost to hide his IP , then he realized you can't port forward with it so went back to being a skrub
* - Private Network - Mar 25, 2015
Negged him linking this thread, pretty gay that he does that.
* - Thehackerguy1 - Mar 25, 2015
OP, just scan the file he game on www.malwr.com after the analysis is done, you can see contacted domains.
* - 1024KB - Mar 25, 2015
I just don't understand this part , can anyone explain to me ?
[img]http://s30.postimg.org/5ums8ez9t/Untitled.png[/img]
why DNS request Microsoft and OVH also ????