Biorante 1.0
(Backdoor.Win32.Delf.ara)

by santasdad

Written in Delphi

Released in May 2006

more versions


Biorante RAT Pre Release
       By (G)


Disclaimer
  Biorante is written for personal use only.
  Biorante is provided "AS IS". The author
  makes no representations or warranties,
  expressed or implied, including but not
  limited to, warranties of merchantablity or
  fitness for any particular purpose.
  The author of Biorante will in no way be
  held responsible for any damages caused by the
  negligent use of this software. By using Biorante
  you will be bound to these terms as long as
  you use this software.


Feature List
  Highlighted connection list if webcam detected
  Online Keylogger
  Screen Capture - PNG compression
  Webcam Capture - PNG compression
  Computer information with customizable script
  File search
  File manager with
    Goto folder
    Download
    Upload
    Execute
    Folder/file properties
    Drive properties
    Copy
    Paste
    Paste as
    Rename
    New folder
    Delete
    Add folder to favourites list
    Open CD drive
  Window manager with
    Send keys
    Show/hide/disable/enable + more for each window
    List All/Visble windows
    Close Window
    End Process
  Process manager with
    Process manager
    Module manager with
      Unload module
      Inject module
    End process
    New task
  Application manager with
    Close application
    End process
  Message box
  Server manager with
    Shutdown server
    Restart server
    Uninstall server
    Edit server
    Upgrade server
  Plugin manager
    Local/remote plugin manager
  Transfer manager
    Multithreaded trasnfer
    Limit number of active transfers
  Change computer name
  Local Connection Manager
  Local Window Manager
  Ban Ips
  Skin Client
  Uses only 1 port
  Each server assigned owm download folder\profile
 


Server:
dropped files:
c:\WINDOWS\system32\server.exe      Size: 144,896 bytes 
c:\WINDOWS\system32\settings.ini    Size: 128 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "StartKey"
data: C:\WINDOWS\System32\server.exe 



tested on Windows XP
May 11, 2006

MegaSecurity