Hello Guys, I decided to sell the Stealer source code, the reason for selling is I'm working on another project. The project will be sold to only 1 person!
Stealer completely rewritten from scratch. Written in C++ over .NET, no dependency on .NET version. Built under v143 toolset, no CRT, native x86 executable. Executable file weight: 230kb (~100kb under UPX).
Run on operating systems Windows 7 - Windows 11 (server versions of Windows Server 2008 R2 - Windows Server 2022), bit depth does not matter.
Working with a server on sockets through its own protocol over TCP. All information is transmitted in encrypted form both to and from the server through a unique key for each machine generated by the server.
The distribution model is a subscription to a time period. After the end of the subscription - it remains possible to use the search for logs, download them and view statistics, the rest is turned off.
Functionality of the executable
Collection of passwords, cookies, autofill data from Chromium (including 80+ versions, Edge), Gecko (including 74+ versions) by searching browser folders in Local and Roaming.
Collecting FTP data for FileZilla authorization from standard paths.
Collection of data from the Steam game service from the received path from the registry.
Collection of messenger data for Pidgin, PSI+, PSI authorization from standard paths.
Collection of mail client data for Outlook authorization from the registry, Thunderbird by searching for a folder with data.
Collection of data for authorization of cold wallets with files like wallet.dat, *.wallet, default_wallet through recursive search, the rest in standard ways: Armory, Ethereum, Jaxx, Atomic, Exodus +
Collecting information about the PC: processor name, MAC address, operating system, time with time zone, username, computer name, amount of RAM, installed programs and their versions.
Collecting png desktop screenshot, compressed with 60% loss of quality on the running machine.
Setting a label for a search profile before adding a log to the panel.
Customizable file grabber in the control panel.
Customizable loader and launch files in the control panel.
All work with data takes place in memory, no libraries are downloaded, the log is collected on the server, only one file from% tmp% is used, it is deleted after sending.
The very removal of the executable file after sending the log.
From under Low IL does not work - you need a loader with an output.
Work with User privileges, without the need for Admin rights.
Does not function in the CIS countries. Checking by country the IP address and regional settings of the machine.
Control panel functionality
Work through Onion v3 and only through it.
Displaying statistics on the number of logs per week, top countries for all logs. Display the last 5 logs by customizable three labels on the statistics page.
Display of all logs with data: ID, label, log status (New, Checked, Double), flag, IP, country, number of passwords, cookies, cold wallets, grabber files from the log, note, time in UTC. Downloading a log, deleting it, logs can be selected and interacted with selected ones.
Search logs by parameters - build name, log status, log ID, presence of passwords by domain, presence of cookies by domain, dates of appearance of logs, country of logs.
Filtering logs in the search by properties - ignoring empty logs, log uniqueness, are there passwords in the log, are there cookies in the log, are there autocomplete data in the log, are there cold wallets in the log, are there grabber files in the log, is there FTP data in the log, whether there is data on mail clients, whether there is game data.
The ability to save a search profile to create a label, delete it, download the found logs in a batch after the search, delete them.
Customizable loader for a specific build or for all at once - the ability to add several tasks, in each task a label or everything is configured, the path for the downloaded file, a link to the file, the maximum number of launches.
Builder with the name of the build for searching by name, in .exe format, viewing the number of logs from the build, its creation time in UTC. Each download - a new file is generated, and the old one is not downloaded.
Custom grabber - specifying the time for collecting grabber files, setting the maximum size of all files. Possibility to add several rules, each rule sets the directory, wildcard pattern, exclusions, search depth, maximum number, maximum file size.
Subscription expiration time display, login. Setting labels for search profiles.
Note: The source code needs to be updated.
For more detailed information, contact via pm.
Stealer completely rewritten from scratch. Written in C++ over .NET, no dependency on .NET version. Built under v143 toolset, no CRT, native x86 executable. Executable file weight: 230kb (~100kb under UPX).
Run on operating systems Windows 7 - Windows 11 (server versions of Windows Server 2008 R2 - Windows Server 2022), bit depth does not matter.
Working with a server on sockets through its own protocol over TCP. All information is transmitted in encrypted form both to and from the server through a unique key for each machine generated by the server.
The distribution model is a subscription to a time period. After the end of the subscription - it remains possible to use the search for logs, download them and view statistics, the rest is turned off.
Functionality of the executable
Collection of passwords, cookies, autofill data from Chromium (including 80+ versions, Edge), Gecko (including 74+ versions) by searching browser folders in Local and Roaming.
Collecting FTP data for FileZilla authorization from standard paths.
Collection of data from the Steam game service from the received path from the registry.
Collection of messenger data for Pidgin, PSI+, PSI authorization from standard paths.
Collection of mail client data for Outlook authorization from the registry, Thunderbird by searching for a folder with data.
Collection of data for authorization of cold wallets with files like wallet.dat, *.wallet, default_wallet through recursive search, the rest in standard ways: Armory, Ethereum, Jaxx, Atomic, Exodus +
Collecting information about the PC: processor name, MAC address, operating system, time with time zone, username, computer name, amount of RAM, installed programs and their versions.
Collecting png desktop screenshot, compressed with 60% loss of quality on the running machine.
Setting a label for a search profile before adding a log to the panel.
Customizable file grabber in the control panel.
Customizable loader and launch files in the control panel.
All work with data takes place in memory, no libraries are downloaded, the log is collected on the server, only one file from% tmp% is used, it is deleted after sending.
The very removal of the executable file after sending the log.
From under Low IL does not work - you need a loader with an output.
Work with User privileges, without the need for Admin rights.
Does not function in the CIS countries. Checking by country the IP address and regional settings of the machine.
Control panel functionality
Work through Onion v3 and only through it.
Displaying statistics on the number of logs per week, top countries for all logs. Display the last 5 logs by customizable three labels on the statistics page.
Display of all logs with data: ID, label, log status (New, Checked, Double), flag, IP, country, number of passwords, cookies, cold wallets, grabber files from the log, note, time in UTC. Downloading a log, deleting it, logs can be selected and interacted with selected ones.
Search logs by parameters - build name, log status, log ID, presence of passwords by domain, presence of cookies by domain, dates of appearance of logs, country of logs.
Filtering logs in the search by properties - ignoring empty logs, log uniqueness, are there passwords in the log, are there cookies in the log, are there autocomplete data in the log, are there cold wallets in the log, are there grabber files in the log, is there FTP data in the log, whether there is data on mail clients, whether there is game data.
The ability to save a search profile to create a label, delete it, download the found logs in a batch after the search, delete them.
Customizable loader for a specific build or for all at once - the ability to add several tasks, in each task a label or everything is configured, the path for the downloaded file, a link to the file, the maximum number of launches.
Builder with the name of the build for searching by name, in .exe format, viewing the number of logs from the build, its creation time in UTC. Each download - a new file is generated, and the old one is not downloaded.
Custom grabber - specifying the time for collecting grabber files, setting the maximum size of all files. Possibility to add several rules, each rule sets the directory, wildcard pattern, exclusions, search depth, maximum number, maximum file size.
Subscription expiration time display, login. Setting labels for search profiles.
Note: The source code needs to be updated.
For more detailed information, contact via pm.
