+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: Nitro Generator + Checker EXTREMELY FAST (/Thread-Nitro-Generator-Checker-EXTREMELY-FAST)
Nitro Generator + Checker EXTREMELY FAST - Lecomzolo - 06-01-2021
cheeks in my fart fart in my cheeks
RE: Nitro Generator + Checker EXTREMELY FAST - fritz - 06-01-2021
No VT report... But I get why
@mothered archive is infected, it contains a fake "chromedriver.exe" : https://www.virustotal.com/gui/file-analysis/NzRiNDRjMGFiMGQzYzA2ZTg5ZGFhNDZmZjM4MTA0OWU6MTYyMjU1NTkxNA==/detection
RE: Nitro Generator + Checker EXTREMELY FAST - T3chnobyte - 06-01-2021
Nice "chromedriver.exe" and "Hax" folder. Whilst programs using proxy's do get detected as false positives, this is not one of them. The main logs your ip, scans the local net (using arp -a), disables windows defender and task manager, changes windows certs (probably for a mitm attack, although I haven't done enough tests to prove that), and exfiltrates personal data (mostly browser passwords and hardware info) to a 000webhost domain. It actually bsod'ed my malware testing vm lol. I'd post links with my testing results (sandbox results, pcaps, etc), but I cant currently post links due to being new
RE: Nitro Generator + Checker EXTREMELY FAST - mothered - 06-01-2021
(06-01-2021, 03:00 PM)fritz Wrote: No VT report... But I get whyIndeed It Is Infected.
@mothered archive is infected, it contains a fake "chromedriver.exe" : https://www.virustotal.com/gui/file-analysis/NzRiNDRjMGFiMGQzYzA2ZTg5ZGFhNDZmZjM4MTA0OWU6MTYyMjU1NTkxNA==/detection
The OP has removed the link, but I've taken action accordingly.