Advertisement
Xylitol

MBRLocker Builder v0.2 Generic serial retriever

Jul 25th, 2011
1,134
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. 'MBRLocker Builder v0.2 Generic serial retriever
  2. 'Contact: xylitol@malwareint.com
  3. 'Add just one Textbox with name: Text1
  4. 'Then just Drop your infected MBR Dump
  5.  
  6. Option Explicit
  7. Dim XorKey, strSubstr, buffer, sHold, sText, sFileExtention, TotalChaine, Path, ipos, sOutput As String
  8. Dim iLocationOfString1, iLocationOfString2, iCompareStyle As Long
  9. Dim a, b, i As Integer
  10.  
  11. Private Sub Form_Load()
  12. Forme.OLEDropMode = 1  'Manual Ole Drop Mode
  13. End Sub
  14.  
  15. Private Sub Form_OLEDragDrop(Data As DataObject, _
  16.                               Effect As Long, _
  17.                               Button As Integer, _
  18.                               Shift As Integer, _
  19.                               X As Single, _
  20.                               Y As Single)
  21.   With Data
  22.   sText = ""
  23.     If .GetFormat(vbCFFiles) Then
  24.       If .Files.Count = 1 Then
  25.         'Only one filename was dragged.  Retrieve it.
  26.        Path = .Files(1)  'Note numeral 1.
  27.        'Pull text file data into our textbox.
  28.          Open Path For Input As #1
  29.             Do Until EOF(1)
  30.               Line Input #1, sHold
  31.               sText = sText & sHold & vbCrLf
  32.             Loop
  33.           Close #1
  34.           Text1.Text = sText
  35.       If .Files.Count > 1 Then
  36.       Exit Sub ' Dude, wtf are you doing here ?
  37.      End If
  38.     End If
  39.   End If
  40. End With
  41.  
  42. ipos = InStr(1, Text1, "EnTeR c0d3:") 'Check 1
  43. If ipos = "0" Then
  44. Text1.Text = "Error: This is not a MBR or it's not infected"
  45. Exit Sub
  46. Else
  47. ipos = InStr(1, Text1, "wExE") 'Check 2
  48. If ipos = "0" Then
  49. Text1.Text = "Error: This is not a MBR or it's not infected"
  50. Exit Sub
  51. Else
  52. TotalChaine = ""
  53. buffer = ""
  54. Text1 = funcParseStringFromString2String(Text1, "EnTeR c0d3:", "wExE") 'Parsing
  55. Text1 = Replace(Text1, " º€¹¸»Íê8Š‹}¬Š€ò", "") 'Remove useless shit (generic)
  56. XorKey = Left$(Text1, 1)      'XOR Key
  57. XorKey = Asc(XorKey) 'Get the Dec
  58. strSubstr = Left$(Text1, 15) 'Hardcoded remove
  59. Text1 = Replace(Text1, strSubstr, "") 'Remove hardcoded
  60. For a = 1 To Len(Text1)           'Let's loop until the end
  61. b = Asc(Mid(Text1, a, 1)) 'Grab one dec char
  62. TotalChaine = XorKey Xor b 'unxor it
  63. buffer = buffer & Chr(TotalChaine) 'make it char and add it to the final serial
  64. Next
  65. Text1 = buffer 'Final result
  66. End If
  67. End If
  68. End Sub
  69.  
  70. Function funcParseStringFromString2String(sSourceString, sString1 As String, sString2 As String, Optional fCaseCaseInsensitive As Boolean = False) As String
  71.  If fCaseCaseInsensitive Then
  72. iCompareStyle = vbTextCompare
  73.  Else
  74. iCompareStyle = vbBinaryCompare
  75.  End If
  76.  
  77.  sOutput = sSourceString
  78.  iLocationOfString1 = InStr(1, sOutput, sString1, iCompareStyle)
  79.  iLocationOfString2 = InStr(1, sOutput, sString2, iCompareStyle)
  80.  If iLocationOfString1 = 0 And iLocationOfString2 = 0 Then
  81. 'nothing found
  82. sOutput = ""
  83.  Else
  84. If Len(sString1) = 0 And Len(sString2) = 0 Then
  85.  'do nothing
  86. ElseIf Len(sString1) = 0 Then
  87.  If iLocationOfString2 <> 0 Then
  88. sOutput = Mid(sOutput, 1, iLocationOfString2 - 1)
  89.  End If
  90. ElseIf Len(sString2) = 0 Then
  91.  sOutput = Mid(sOutput, iLocationOfString1 + Len(sString1))
  92. Else
  93.  'cut off begining
  94. If iLocationOfString1 <> 0 Then
  95. sOutput = Mid(sOutput, iLocationOfString1 + Len(sString1))
  96.  End If
  97.  'take off the end part
  98. iLocationOfString2 = InStr(1, sOutput, sString2, iCompareStyle)
  99.  If iLocationOfString2 <> 0 Then
  100. sOutput = Mid(sOutput, 1, iLocationOfString2 - 1)
  101.  End If
  102. End If
  103.  End If
  104.  funcParseStringFromString2String = sOutput
  105. End Function
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement