Donation

Donate? BTC: 1B6qSDr4gn6jZTWxdAJoHHPYQDPeoaL2CS

Tuesday, March 3, 2015

LoadHTTP Botnet cracked + Downloads

Hey BotZone. I recently came across the builder source for the botnet "LoadHttp". This bot was sold on the forum HackForums, and developed by _Stoner, A member of that forum. The botnet cost $500 for one build.

Below is a direct quote from the coder himself.
Pricing:
$500

$50 for update/rebuild
Updates that are purely bug fixes are free.
Customer Support free

For now I only accept BTC.
Contact me on Jabber if you wish to purchase. If you do not have Jabber, register one and contact me.


Now, me being the person I am, i went ahead and bought it... It was a biiiiiiiiiiig mistake. The botnet sucked, there was no rootkit (proven later in the article) and it was just awful.


Some things to know about the bot (direct quote from _Stoner)

Purpose and General Objectives of the Bot:
This botnet is made to be as long-lasting and resiliant as possible. HTTP communication allows for a large number of infections at
once. The program requires no dependencies on the computer except for Windows OS itself: it is coded in C++ (no C-runtime required and supports unicode). The bot has an effective Anti-Virus disabler that supports 31 different security solutions covering a vast 95%+ of the AV market. This means you will retain larger amounts of bots by avoiding a lot of AV detections and removals. It also has an Anti-Malware routine which successfully kills the majority of all malware, even those notorious for being resistant to tampering. The startup key, installed file, and process are all protected. This botnet system is the best of its kind for holding infections for a long time.

Anyways, the botnets not AWFUL, but its still shitty.

The cracked version of the bot was leaked on the forum TrojanForge.co, and the title of the thread was "LoadHTTP shit bot builder" posted by the member NoNh. Although the member duyan13 was the one doing all the work. Almost every reply talks about how the bot is shit, and its another shitty hf bot. lol. Although the coder is continuing to sell the bot on the poplar hacking forum HackForums, sales have dropped tremendously.

Inside of the zip file containing the panel files, and the builder itself, theres a info.txt containing this:

====================================================================================================
====================================================================================================
1) This bot is absolute piece of Shit
2) I take no credit for the builder, I just made it noob friendly for lazy people who asked me kindly so ...
3) Binary is Properly unpacked (modded UPX header Shit)
3) Builder originaly coded by duyan13 all credit on the RE goes to him Too
4) If it is not working for you, maybe you shouldn't be using it ... or it's shit ... or Domain name too long ... anyway see point 1
5) Builder Binary is Packed : MD5 776A76F179E3E0DCD8F8D496AC19925D
====================================================================================================
====================================================================================================

Heres some screenshots of the botnet:
Machines List: http://i.gyazo.com/ac3afa69b8d3b95af3e05bf6cb034267.png
Commands Management[1]: http://i.gyazo.com/9a0ccd7e3a434289ef2bf524cbdff4b9.png
Commands Management[2]: http://i.gyazo.com/59bec71ed534be0053c423e52d6b3178.png
Commands Management[3]: http://i.gyazo.com/e636ac62d4d60afb4791da575b8d08b7.png
Commands Management[4]: http://i.gyazo.com/9e326f8a85e3ac961f935135d3bae857.png
Users Management: http://i.gyazo.com/f117b1648cf2652133d37d233935a63a.png
Preferences: http://i.gyazo.com/3696cfa45df8d1331aeb0775e3e64e0d.png
Login Page: http://i.gyazo.com/72418eb52f7f749230978d5cd807f19b.png 


Heres the download links:

Panel + Builder We have switched to http://lethaldose.me for downloads

1 comment:

  1. Harrah's Casino & Hotel | Mapyro
    Harrah's 사천 출장샵 Casino 천안 출장샵 & Hotel is located in 777 Harrahs Blvd, Atlantic City, NJ 나주 출장샵 08401. 목포 출장안마 Get directions, reviews 충청북도 출장마사지 and information for AAA/AARP members, seniors,

    ReplyDelete