HF Spreader. UID=2659060

.Odin · Mar 23, 2015 08:27 PM

Name: CreateChaoss
UID: 2659060
Skype: createchaoss

This kid is posting threads saying add me on Skype.
After you add him he will continue to send you his stub over and over until you download it.

I downloaded the file which is only 1mb and labeled "Counter Strike GO Aimbot"

I ran it on a RDP and watched as the network usage shot up.

I scanned the file the results are below:
Spoiler (Click to View)

Talon · Mar 23, 2015 08:28 PM

Why didn't you just scan it first before running it on anything :p

.Odin · Mar 23, 2015 08:32 PM

I scanned it then a ran the file.
I wanted to make sure.

Jeremiah † · Mar 23, 2015 08:34 PM

Why do people even try this anymore lol..

GenericSkid · Mar 23, 2015 08:36 PM

Why do people still use darkcomet? It's 2015 people. Get something that doesn't get detected even with the best crypterd on the market.

Mar 23, 2015 08:51 PM

What a fucking skid I can vouch for this, dumbass didnt even crypt his RAT lol.

.Odin · Mar 24, 2015 12:23 PM

(Mar 23, 2015 08:36 PM)GenericSkid Wrote: Why do people still use darkcomet? It's 2015 people. Get something that doesn't get detected even with the best crypterd on the market.

I know right I use Babylon. People need to modernize.

Mar 24, 2015 03:21 PM

i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.

Sogomn · Mar 24, 2015 11:44 PM

(Mar 24, 2015 03:21 PM)CreateChaoss Wrote: i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.

Ah. They will definitely help you after you've sent them your "CS GO Aimbot".

w34k · Mar 24, 2015 11:55 PM

(Mar 23, 2015 08:32 PM).Odin Wrote: I scanned it then a ran the file.
I wanted to make sure.

Why even run it ? Lol, just look at the 'Behavioural Information' on VirusTotal. You can clearly see his no-ip host and IP. 🤦‍♂

MrKamarJ · Mar 25, 2015 08:37 AM

(Mar 24, 2015 03:21 PM)CreateChaoss Wrote: i fucking hate my life and im a piece of shit on hackforums. i wasnt even trying to rat i didnt even know if this worked. i wanted ppl to add me on skype for rat help and i was lonely.

LMFAOOOOOO! OH MY GOSH, THIS COMMENT IS AMAZING! I needed that laugh lol!

The way you went about it, you now sure do have a lot of "friends".

Cheers

Mar 25, 2015 08:44 AM

Cracked up looking at the behavioral , first he tried using cyber ghost to hide his IP , then he realized you can't port forward with it so went back to being a skrub

Private Network · Mar 25, 2015 08:48 AM

Negged him linking this thread, pretty gay that he does that.

Thehackerguy1 · Mar 25, 2015 03:14 PM

OP, just scan the file he game on www.malwr.com after the analysis is done, you can see contacted domains.

1024KB · Mar 25, 2015 07:06 PM

I just don't understand this part , can anyone explain to me ?

[img]http://s30.postimg.org/5ums8ez9t/Untitled.png[/img]

why DNS request Microsoft and OVH also ????

Login
Username/Email:
Password:	Lost Password?
	Remember me

Possibly Related Threads...
Thread / Author	Replies	Views	Last Post
[Community Alert] Repeated scam threads uid=4052771, uid=4034964, uid=2872174, uid=4013872 by Bob WhiteDec 2, 2018 11:23 AM	16	741	Dec 2, 2018 11:23 AM Last Post: † S A V A G E †
[Community Alert] Multi scamming on several accounts- Savagee - UID 3782121 & UID 3210804 & UID 3158127 by Malicious`Jan 14, 2018 12:48 AM	4	486	Jan 14, 2018 12:48 AM Last Post: Malicious`
[Community Alert] @Reach UID=3316202 @Taylor UID=365322 @Fussy UID=3704641 Threatening to gang-rep me? by NenechiNov 16, 2017 02:18 PM	12	509	Nov 16, 2017 02:18 PM Last Post: Ranger.