ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content



Photo

GANG-NUKER 2.0 Cracked | DISCORD MULTI TOOL | Cleaned by ObbedCode


  • Please log in to reply
GANG-NUKER 2.0 Cracked | DISCORD MULTI TOOL | Cleaned by ObbedCode

#231

blancoxd
blancoxd
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 15
Threads: 0
Joined: Feb 25, 2023
Credits: 0
One year registered
#231

nice share bro


  • 0

#232

GTRX0xi
GTRX0xi
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 12
Threads: 0
Joined: Mar 26, 2023
Credits: 0
One year registered
#232

thanks bro 


  • 0

#233

syfrboi
syfrboi
    Offline
    0
    Rep
    0
    Likes

    Member

  • PipPipPip
Posts: 41
Threads: 0
Joined: Mar 13, 2023
Credits: 0
One year registered
#233

thx 


  • 0

#234

whatisthei
whatisthei
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 2
Threads: 0
Joined: Mar 30, 2023
Credits: 0
One year registered
#234

THX bro


  • 0

#235

moodyna
moodyna
    Offline
    0
    Rep
    -1
    Likes

    Member

  • PipPipPip
Posts: 33
Threads: 0
Joined: Feb 20, 2023
Credits: 0
One year registered
#235

ty helps a lot


  • 0

#236

JasperTH2
JasperTH2
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 13
Threads: 0
Joined: Mar 30, 2023
Credits: 0
One year registered
#236

Cool


  • 0

#237

y0uc4ntf1ndm3
y0uc4ntf1ndm3
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 1
Threads: 0
Joined: Mar 31, 2023
Credits: 0
One year registered
#237

Good post bro


  • 0

#238

koxu3322
koxu3322
    Offline
    0
    Rep
    0
    Likes

    New Member

Posts: 20
Threads: 0
Joined: Oct 25, 2022
Credits: 0

Two years registered
#238

hq nukker


  • 0

#239

Haven7143
Haven7143
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 8
Threads: 0
Joined: Jul 24, 2022
Credits: 0
Two years registered
#239

 

Im going to start a new thing for every infected thread , ASSUMING it has the clean BINs binded to it

I will reupload the the Content but the CLEAN Version.

Now it wont always be possible as some dont have the Binded Bins or are just plain out all infected :(

 

This Sample was Binded as a Windows .CAB or Cabinet File Upon Extraction you will get the Infected Bins and Non Infected Bins

 

Once Executed , Select option "1" enter a Random key

Once Greeted with the Logo Screen click Enter.

 

cW4YOgm.png

 

===========================================================

Downloads

===========================================================

 

Zippyshare

 

 

AnonFiles

 

 

MirrorAce

 

 

MultiUp

 

 

 

REAL VT Bin Scan:

https://www.virustot...41ddfa207177ad5

 

Clown of the Day Spreading the Coin Miner Malware goes to:

 

Spoiler

Full Analysis ON the INFECTED version

 

~ "WEXTRACT.exe" is the original file name

~ Description "Internet Explorer" (spoofed file details)

~ Its a Cabinet file so when extracting it now gives us two EXEs (Brw0C.exe) & (GANG.exe)

~ Gang.exe seems to be legit "Brw0C.exe" is not , it is also 700+ mb

~ Uses MPRESS packer

~ Runs as Admin executes Powershell

~ Drops files in the %AppData% Roaming Folder under "WindowsElements" folder

~ Files Dropped "Kapow.zip" , "DesktopSessionManager.exe" , "AntimalwareService.exe"

~ In the "Kapow" folder it has a file called "GPUMonitor.exe"

 

https://imgur.com/a/Mkf0c2n

 

Bin Scans:

Spoiler

 

clrxx1 on top


  • 0

#240

JaydenHa
JaydenHa
    Offline
    0
    Rep
    0
    Likes

    Lurker

Posts: 1
Threads: 0
Joined: Apr 04, 2023
Credits: 0
One year registered
#240

It us very helpful.
Thanks


  • 0


 Users browsing this thread: and 1 guests