GANG-NUKER 2.0 Cracked | DISCORD MULTI TOOL | Cleaned by ObbedCode

[ryze333]

THANKS SO MUCH

[Sixkashi]

let me see

[fardeatermeow]

W leak tysm

[rozvaldwsxxd]

please work i need to nuke a server

[Dav554634534]

Clap CLap Clap

 

[Dav554634534]

Hey

[Dav554634534]

Hola

[Virtuoxo]

 

Im going to start a new thing for every infected thread , ASSUMING it has the clean BINs binded to it

I will reupload the the Content but the CLEAN Version.

Now it wont always be possible as some dont have the Binded Bins or are just plain out all infected

 

This Sample was Binded as a Windows .CAB or Cabinet File Upon Extraction you will get the Infected Bins and Non Infected Bins

 

Once Executed , Select option "1" enter a Random key

Once Greeted with the Logo Screen click Enter.

 

 

===========================================================

Downloads

===========================================================

 

Zippyshare

 

 

AnonFiles

 

 

MirrorAce

 

 

MultiUp

 

 

 

REAL VT Bin Scan:

https://www.virustot...41ddfa207177ad5

 

Clown of the Day Spreading the Coin Miner Malware goes to:

 

Spoiler

 

Full Analysis ON the INFECTED version

 

~ "WEXTRACT.exe" is the original file name

~ Description "Internet Explorer" (spoofed file details)

~ Its a Cabinet file so when extracting it now gives us two EXEs (Brw0C.exe) & (GANG.exe)

~ Gang.exe seems to be legit "Brw0C.exe" is not , it is also 700+ mb

~ Uses MPRESS packer

~ Runs as Admin executes Powershell

~ Drops files in the %AppData% Roaming Folder under "WindowsElements" folder

~ Files Dropped "Kapow.zip" , "DesktopSessionManager.exe" , "AntimalwareService.exe"

~ In the "Kapow" folder it has a file called "GPUMonitor.exe"

 

https://imgur.com/a/Mkf0c2n

 

Bin Scans:

Spoiler

WEXTRACT.exe:

https://www.virustotal.com/gui/file/715683700d7a4e514a44eca770fff7295af7f4327f3a852ddb8e8cb05cbf4a0b?nocache=1

https://www.virustotal.com/gui/file/d59f316336a4544ec85e9733381e69ee4766e2471e411978261dc9872bf54012?nocache=1

DesktopSessionManager.exe:

https://www.virustotal.com/gui/file/89ae08a7390f0d70aada33a53aca02021045166680060d6eadc694f0d5193c25?nocache=1



AntimalwareService.exe:

https://www.virustotal.com/gui/file/4813deccec566bad786cfea9896b1e4add2a1ca29cc4b1fc7a7273113e2ff6c2?nocache=1

https://imgur.com/a/Mkf0c2n

 

[Virtuoxo]

 

Her virüslü i? parçac??? için yeni bir ?ey ba?lataca??m, kendisine ba?l? temiz BIN'lere sahip oldu?unu farz ediyorum

?çeri?i ancak TEM?Z Sürümü yeniden yükleyece?im.

?imdi, baz?lar?nda Ba?lanm?? Kutular olmad???ndan veya tamamen virüs bula?t???ndan, bu her zaman mümkün olmayacak.

 

Bu Örnek Windows .CAB veya Kabin Dosyas? Olarak Ba?land? Ç?kart?ld?ktan Sonra Virüslü Kutular? ve Virüslü Olmayan Kutular? alacaks?n?z

 

Yürütüldükten sonra, "1" seçene?ini seçin, bir Rastgele tu? girin

Logo Ekran? ile Kar??land?ktan Sonra Enter'a T?klay?n.

 

 

================================================= =========

?ndirilenler

================================================= =========

 

Zippyshare

[gizle] https://www22.zippys...Q41nk/file.html [/hide]

 

Anon Dosyalar?

[gizle] https://anonfiles.co...gangcracked_zip [/hide]

 

ayna as

[gizle] https://mirrorace.org/m/1Ne6k [/hide]

 

Çoklu Yukar?

[gizle] https://multiup.org/...2227f863a231e65
[/hide]

 

 

GERÇEK VT Kutusu Taramas?:

https://www.virustot...41ddfa207177ad5

 

Clown of the Day Spreading the Coin Miner Malware goes to:

 

Spoiler

 

Full Analysis ON the INFECTED version

 

~ "WEXTRACT.exe" is the original file name

~ Description "Internet Explorer" (spoofed file details)

~ Its a Cabinet file so when extracting it now gives us two EXEs (Brw0C.exe) & (GANG.exe)

~ Gang.exe seems to be legit "Brw0C.exe" is not , it is also 700+ mb

~ Uses MPRESS packer

~ Runs as Admin executes Powershell

~ Drops files in the %AppData% Roaming Folder under "WindowsElements" folder

~ Files Dropped "Kapow.zip" , "DesktopSessionManager.exe" , "AntimalwareService.exe"

~ In the "Kapow" folder it has a file called "GPUMonitor.exe"

 

https://imgur.com/a/Mkf0c2n

 

Bin Scans:

[spoiler]

WEXTRACT.exe:

https://www.virustotal.com/gui/file/715683700d7a4e514a44eca770fff7295af7f4327f3a852ddb8e8cb05cbf4a0b?nocache=1

https://www.virustotal.com/gui/file/d59f316336a4544ec85e9733381e69ee4766e2471e411978261dc9872bf54012?nocache=1

DesktopSessionManager.exe:

https://www.virustotal.com/gui/file/89ae08a7390f0d70aada33a53aca02021045166680060d6eadc694f0d5193c25?nocache=1



AntimalwareService.exe:

https://www.virustotal.com/gui/file/4813deccec566bad786cfea9896b1e4add2a1ca29cc4b1fc7a7273113e2ff6c2?nocache=1

https://imgur.com/a/Mkf0c2n

[/bir ?eyin önceden reklam?]

 

[Uneeeeen]

The reall nuke