+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Midi-Chlorian BOTNET/RAT Progress Update | Anti-WD & VM | Anti-Process | Startup (/showthread.php?tid=6205252)
Midi-Chlorian BOTNET/RAT Progress Update | Anti-WD & VM | Anti-Process | Startup - Midi-Chlorian - May 12, 2022
Previously known as Justice Botnet
Midi-Chlorian Administration
Client:
- Startup Persistence in Registry
- Anti-VM
- Anti-Process (Common Analysis tools)
- Anti-WD
- Keylogger
- Desktop Screenshot
- CMD Remote Execution
Panel:
- Idle Time
- OS
- IP
- Country
- Uninstall Client
- Remove Startup
- Remote Download and Execute
- Shutdown and Restart PC
- Fetch Process List
Todo: Write builder for stub.
*As always taking suggestions from everyone as I continue to work on this project.*
*As always taking suggestions from everyone as I continue to work on this project.*
RE: Midi-Chlorian BOTNET/RAT Progress Update | Anti-WD & VM | Anti-Process | Startup - omboml - May 13, 2022
what do u mean by anti windows defender? inject into legit process? disable wd?
RE: Midi-Chlorian BOTNET/RAT Progress Update | Anti-WD & VM | Anti-Process | Startup - Midi-Chlorian - May 13, 2022
(May 13, 2022 07:19 AM)omboml Wrote: what do u mean by anti windows defender? inject into legit process? disable wd?
It disables Windows defender by registry, and upon every startup re-disables if needed.