Skip to content

Instantly share code, notes, and snippets.

View RussianPanda95's full-sized avatar
😈

RussianPanda RussianPanda95

😈
View GitHub Profile
@RussianPanda95
RussianPanda95 / atomic_stealer_decrypted_strings.txt
Last active January 16, 2024 08:40
Atomic Stealer decrypted strings
Decrypted string at address 0x1000224f2: osascript -e 'display dialog "Required Application Helper. Please enter passphrase for
Decrypted string at LEA: ." default answer "" with icon caution buttons {"Continue"} default button "Continue" giving up after 150 with title "Application wants to install helper" with hidden answer' at 0x100022629
Decrypted string at address 0x10002278a:
Decrypted string at address 0x100022b9e: pwd
Decrypted string at address 0x10002aa3c: Chromium/
Decrypted string at address 0x10002ad8d: Profile
Decrypted string at address 0x10002c328: /cookies.sqlite
Decrypted string at address 0x10002c5cd: /formhistory.sqlite
Decrypted string at address 0x10002c872: /key4.db
Decrypted string at address 0x10002cb17: /logins.json
@RussianPanda95
RussianPanda95 / AsukaStealer_configuration.txt
Created February 14, 2024 07:15
AsukaStealer Configuration
gecko;discord;chromium;download;grabbers;extensions;processGrabber;dll;ebaltvoumamashuazazazaza
Firefox
%USERPROFILE%/AppData/Roaming/Mozilla/Firefox
Waterfox
%USERPROFILE%/AppData/Roaming/Waterfox
K-Meleon
@RussianPanda95
RussianPanda95 / lummac2_config.txt
Created February 19, 2024 05:24
LummaC2 config (3abe8b51f5087787b9c121b10f37108b)
{
"v": 4,
"se": true,
"ad": false,
"ex": [
{
"en": "ejbalbakoplchlghecdalmeeeajnimhm",
"ez": "MetaMask"
},
{