Eagle Monitor RAT Reborn Current features

• Clients have written in C# and VB (32 and 64-bit)
• Passwords recovery (automatically saved)
• History recovery (automatically saved)
• Blur screen locker
• Remote camera viewer (+ save pictures)
• Remote desktop viewer (+ save pictures)
• Process manager
• Kill process (native techniques)
• Suspend process
• Resume process
• (shellcode) Process injection (NtWriteVirtualMemory + NtCreateThreadEx)
• (shellcode) Process injection (NtMapViewOfSection + NtCreateThreadEx)
• Shutdown system
• Reboot system
• Suspend system
• Hibernate system
• Log out user
• BSOD
• Lock workstation
• Offline keylogger (automatically saved)
• Realtime keylogger (automatically saved)
• (current client) Managed pe execution
• (current client) Unmanaged pe execution
• (current client) Managed dll execution
• (current client) Unmanaged dll execution
• (current client) Shellcode execution
• Audio up
• Audio down
• Hide + show taskbar
• Hide + show desktop icons
• Set wallpaper
• File manager
• Delete file
• Download file
• Rename file
• Shortcuts (download, desktop, and documents paths)
• Logs ((automatically saved))
• Mass Tasks

Exobot v2.5 Android bot Key functions

•  — Credit card stealer (can be linked to desired apps or started/restarted manually)
• — Injects (150+): Largest banks of AT, DE, UK, NL, TH, PT, BR, AU, FR, TR, Social networks, messengers with localizations (this means it shows inject depending on the detected language), payment systems (PayPal, WU, etc)
• — USSD requests
• — Calls forwarding
• — SMS sent to the specified phone number
• — Mass SMS spam to phone contacts
• — Mass SMS spam to the lists of your phone numbers (not limited, you are setting URLs to lists in “domain.com/numbers.txt” format)
• — Screen lock with web page specified by URL
• — SMS intercept and deleter (user will not get alerted about SMS)
• — Device killer (makes password changed, screen locked and sound disabled)
• — Push notifications (Set the desired message and start the specified app)
• — Block unwanted apps (AVs, cleaners, etc
• — you can set custom apps on panel settings)
• — SMS Redirect (allow forwarding incoming SMS to the specified phone number)
• — Make Calls
• — Get installed Apps (new apps will appear in the panel immediately after installing on the device)
• — SMS deleter (allows to hide and delete SMS on all Android versions)
• — Contacts grabber (collects phone contacts and names) Bot technical details
• — Invisible & stable work on Android 4/5/6/7/8(autorun function for injects and CC stealer on Android 7/8 sold separately)
• — Traffic between bots and panel is encrypted and compressed to avoid sniffers and fakes
• — Extendable module system allows adding required functionality on existing bots pretty easy
• — Bot has an auto-update system
• — Bot does not require root rights
• — Manual bot deletion is almost impossible
• — Anti Emulators/Debuggers Panel details
• — Fast & modern web panel placed on dedicated and secure VPS with logs disabled
• — Documentation Rus/Eng (in development)
• — Jabber notifications on new data incoming (cards, bank info, SMS from specified phone numbers, etc)
• — Bots task list
• — you can set tasks to checked or all filtered bots, view the status of tasks, cancel or repeat them later
• — Panel allows you to save notes on your data
• — A lot of info about each bot: phone number, IMEI, IP, language, display state, phone time, operator, android version, model, etc
• — You can specify a list of wanted apps to mark and find all bots with these apps
• — Templates system: each APK can have a unique icon, title, and tag to track it in the panel
• — Injects can be enabled/disabled/re-enabled (when they were filled)
• — Real-time execution of such tasks
• — Banks, cards, and other data can be exported to TXT/CSV formats
• — Extended statistics (by country/language/tag/version, online/offline, grabbed cards/banks, etc)
• — Guest statistics for install sellers. You can reset these guest statistics to see what bots will appear in the panel after the current time. Then you can make it back
• — APKs can be downloaded from the panel. New versions will be uploaded to the panel automatically. Also, the panel provides package names of APKs
• — useful for loaders
• — You can add new domains on all existing new bots at any time
• — Panel accounts manager(means you can create panels/apks/injects/and give it for rent)
• — Builder+crypter panel

Loader features Loki v5 Stealer (Panel + Source

– Startup (resident loader)
– Download & Run (exe | dll)
– Download & Drop
– Update bot
– Uninstall bot
– Get password from bot per request
– Geotargetting, load to selected country
– Set reconnect interval
– Get screenshot

ABOUT CERBERUS V2

Sending SMS 2FA grabber Interception of SMS Covert SMS interception Lock your device Mute the sound Keylogger (messengers, waltz app, telegram-secret, banks, etc., except for browsers!) Executing USSD commands Call forwarding Bank fake page opening Launch any installed application Bank push notification (Automatic push – determines which established bank) Open URL in the browser.

Get all installed apps Retrieve all contacts from their phone book Retrieve all saved SMS Removing any application Bot self-destruction Automatic confirmation of rights and permissions.

The bot can have several spare URLs to connect to the server Injections (Html + js + css, download to the device and run from disk, poor connection or lack of Internet will not affect the operation of injections)

Card grabber, Mail Grabber Automatic inclusion of injections after the time specified in the admin panel Automatic shutdown of Google Play Protect + shut down after the time specified in the admin panel Anti-emulator (Bot starts working after the device is active)

Modularity Bot application size from 125 to 180 KB (Crypt about 1 MB) Works on Android versions 5 and above Covert, SMS interception works from version 5 and higher Injectors work on all current versions of Android 5 – 10+ data between the server and the bot is encrypted using the RC4 + base64 algorithm with a random key Blocking bot deletion Blocking disabling admin rights

Blocking Disable Accessibility Service May have several spare domains for submission Multilanguage Unique bot identifier Android version Build Marking Country + language which is set in the device settings Last knock Screen status (on / off) Google Play Protect status Accessibility Service state Administrator Rights Status Main module receive status Status of hidden SMS interception Availability of bank logs, cards, and emails! List of established banks Device IP Date of device infections Device model Operator Battery state of charge

Holder’s cell number Phone activity (Determine the presence of an emulator) Bot working hours! Live admin panel General and individual tasks Filtering the bot table Adding your injections using a user-friendly interface Loading injections in HTML format Statistics: Online, Offline, Logs Storing application lists and phone contacts in the database Separate logs of banks, cards, and emails The panel is located in the TOR network on our servers Builder