[eldiablo54]

Hi Guys,

First I hope this is in the right place as this is my first Thread. I would like to ask some advice.

I have used ardamax as my remote logger. I have now copied the exe to jpg. I did not put this in rar file I just said straight copy jpg + exe to file.jpg

So it created the jpg as per some instructions on the web. Some guys put it first in a rar then does the whole binding rar to jpg if that is the correct term.

So now I have the file.jpf when i double click the picture shows of the jpg I chose. My question to the pro's are this now. By clicking on that jpg did it run my exe in the back ground and is that keylogger now active. Is that how it works.


So If I send this jpg to target and they double click it to open the jpg the exe file will be executed same time or is there another way I need to do this.

Please any advise will be apreaciated.

[TomHimself]

You should check your running processes and see if the keylogger process is running.

[eldiablo54]

Ok so best thing for me is to send it to another pc of mine double click the jpg and see if it does its job?

[Edward Blake]

Yeah, you could test it on a test machine or depending on the keyloggers "antis" settings a virtual machine (use something like virtual box). I tend to test on virtual box.

Re: file spoofing, I think you can change the .exe to a .scr and it will execute the same way. Change the file icon to that of a jpeg and then use right to left text formatting on the file with your spoofed .jpg file extension. I went looking for the tut but can't find it. It's on here somewhere.... shoulda woulda coulda bookmarked it for later.

[eldiablo54]

Ah Awesome thanks Edward. I will do some search for the TUt. Thanks guys awesome community to learn. I will give feedback once I get it working and if I was successful in getting the target.