Help to install my malware

[crypterexe]

Dears

I need your help, i have an access in my victim but my access is only a cmd and my privilege is administrator but my cmd run in SYSTEM user in windows so I tried to install a rat from my cmd but each time I got connection from SYSTEM user .

i.e my victim loggedin the PC with alex user and my access in a system user so when send the rat and execute it through my cmd "as you know my cmd run in system user" the connect got from the system use in other words I hacked the system user so how can I execute the rat in alex user from my cmd ??

 

[pr3torian]

so, what u mean is this?
u are logged in as Admin, on same machine?
and you want to infect Alex, in this case?
try to get Lsass dump, and search for passwords, maybe this will help, to get you the Alex credentials

 

[crypterexe]

yes i am logged in as admin on the same machine and I need to install my rat/malware/keylogger in Alex user

 

[0xc83736]

если у вас есть права администратора, то у вас должен быть доступ к файлам пользователей alex, поэтому просто перетащите свою крысу в папку автозагрузки или что-то в alex

 

[crypterexe]

if you have admin rights then you should have access to alex users files so just drag your rat to startup folder or something in alex

Yes you are right I will try this way , also I think about create a service or schedule task , thank you , if you have more ideas let me know

 

[cocainecowboy]

See if you can dump lsass.exe to get alexs password

1. Open task manager
2. Go to details tab
3. find lsass.exe
4. right click and select create dump file
5. Mimikatz that shit offline if you can

 

[cocainecowboy]

I am confused why you cant install it already if you have system rights

 

[crypterexe]

I am confused why you cant install it already if you have system rights

if install the keylooger with system right "my cmd run in System stem right" the keylogger will be installed in system right not in alex so alex will see my keylogger in his task
manager but my keylogger will capture only the keystors for the system user only not alex user

 

[pr3torian]

run under his name, after that u can disable taskmanager

 

[pr3torian]

why dont you make a lab, in vmware, and test it, then u can learn from your mistakes

 

[crypterexe]

why dont you make a lab, in vmware, and test it, then u can learn from your mistakes

already i did it

 

[crypterexe]

already i did it

I tried many ways but still ididn't find any solution

 

[pr3torian]

Del