I've been wanting to code one of these for a while, now. So, I thought why not.
Name: FhotoLocker
Coded in: C# & PHP
Features: - Completely locks the victim's screen
- Persistance
- HTTP Panel
- Advanced Statistics
- Password via panel
- Server side
- Anti-VM
- Anti-Sandbox
- Mutex
- Kills common proccesses
- Botkiller
That's basically just some of the features summed up, I'll continue to develop this thought the duration of this thread.
All feedback & suggestions are greatly appreciated.
Panel:
I'm thinking of $15, for lifetime inc unlimited re-builds. Sounds fair?
Vouch for Fhoto! This is a very HQ product and works 100%. Thank you!
Code Completely locks the victim's screen
Persistance
HTTP Panel
Advanced Statistics
Password via panel
Server side
Anti-VM
Anti-Sandbox
Mutex
Kills common proccesses
Botkiller
How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?
For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.
Persistence? How does this work, do you inject code into other processes that monitor your main module?
be prepared to explain this shit if you want people to believe
(Jan 17, 2014 11:25 PM)kingroot Wrote: Code Completely locks the victim's screen
Persistance
HTTP Panel
Advanced Statistics
Password via panel
Server side
Anti-VM
Anti-Sandbox
Mutex
Kills common proccesses
Botkiller
How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?
For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.
Persistence? How does this work, do you inject code into other processes that monitor your main module?
be prepared to explain this shit if you want people to believe
Preach, fucking preachhhh
We need more people explaining HOW things work on this forum.
Product looks great, I'll definitely be a customer once I see it's got some reviews!
What must they do to remove the locker?
DO NOT DEAL WITH THIS MEMBER
Vouch for Fhoto, product looks great.
GLWS mate!
(Jan 18, 2014 03:10 AM)Caillou Wrote: What must they do to remove the locker?
The victims probably will be asked to complete a survey.
(Jan 17, 2014 11:25 PM)kingroot Wrote: How exactly does 'anti-vm & anti-sandbox' work? SandBox works at a kernel level, i don't see you being able to bypass this in .NET
How does one exactly bypass a 'VM'?
My guess: Since this is C# and he did not mention any hooking (Hue) or whatsoever, it is checking if these processes are running and tries kills them.
(Jan 17, 2014 11:25 PM)kingroot Wrote: For botkiller i'm assuming you're looking at modules that were mapped using virtualqueryex and comparing the types.
My guess: Deletes every .exe-File in AppData and other common folders where malware is usually dropped.
(Jan 17, 2014 11:25 PM)kingroot Wrote: Persistence? How does this work, do you inject code into other processes that monitor your main module?
My guess: VBS-File checking if file is existent and running, if not run it again.
(Jan 18, 2014 04:27 AM)Tastylicous Wrote: My guess: Since this is C# and he did not mention any hooking (Hue) or whatsoever, it is checking if these processes are running and tries kills them.
My guess: Deletes every .exe-File in AppData and other common folders where malware is usually dropped.
My guess: VBS-File checking if file is existent and running, if not run it again.
Did Fhoto 'personally' PM you to answer these ? 🎉🤗
😝
Gl
(Jan 18, 2014 05:40 AM)Bat™ Wrote: Did Fhoto 'personally' PM you to answer these ? 🎉🤗
😝
Gl
No, as I said these are my guesses since that is what is common for HF-Malware.
(Jan 18, 2014 05:40 AM)Bat™ Wrote: Did Fhoto 'personally' PM you to answer these ? 🎉🤗
😝
Gl
Lol, what?
I don't even know him.
Stop bashing this thread.
(Jan 18, 2014 05:49 AM)Fhoto. Wrote: Stop bashing this thread.
Didn't mean to bash anything ❓
Expect feedback if you post a thread and don't be mad if people post their thoughts!
(Jan 18, 2014 05:50 AM)Tastylicous Wrote: Didn't mean to bash anything ❓
Expect feedback if you post a thread and don't be mad if people post their thoughts!
I was talking to Bat, not you, aha.
I forgot to say thank-you for your feedback.
Cheers.
(Jan 18, 2014 05:52 AM)Fhoto. Wrote: I was talking to Bat, not you, aha.
I forgot to say thank-you for your feedback.
Cheers.
Oh 😝 Well, alright then I wish you GLWS 🤝
(Jan 18, 2014 05:49 AM)Fhoto. Wrote: Lol, what?
I don't even know him.
Stop bashing this thread.
Lol, I'm not.
Guess I was wrong. :P
Ill just quote this line from Tasty's post 😝
"Expect feedback if you post a thread and don't be mad if people post their thoughts!"
Anyways GLWS :P
|