dreamy ibex
It wants to download a script from github user tttcheckbot2 project python39 and run it on the powershell
#What is this trojan script want to do exactly?
narrow pawn
Well what are you even trying to do?
slim kite
Well what are you even trying to do?
I want to know if the script is used to locked a pc then required to paid money later or the one that steel browser cookie or monitor keyboard input
steal*
narrow pawn
in that case you have to look into whats its executing
and dive deep inside the code
with just this information I cannot give you any clear answer.
@slim kite where did you find this script?
slim kite
A friend extracted and ran it on his machine
narrow pawn
did it come from the python39 repo on the user ttcheckbot2?
slim kite
S1 send to him via telegram
narrow pawn
who is S1?
I have send in a ticket to Github as well reporting both accounts, and regarding their code.
narrow pawn
soft fern
idk if this helps but this is the github repo :
https://github.com/kylianjacky/newprj
the code is encoded in base64, you can decode it by searching base64 decoder on google
