uses discord rich presence, 99% of the code is obfuscated, use
"
CaRtiEss
Newbie HvHer
User ID:
131093
yumesoft/al/_do.class
Stealer_Crypto_Wallet
"
idk if its real but just dont use it, look like malware imo (the free one) lot of files spamming telegram channel
You must be registered for see links
4 deobf
Safe Net Thread 'Rockstar 2.0 Client'
Use the legacy or Prism launcher on the version 1.21.4 Fabric, if it doesn't work , try downloading fabric api , bind gui with .bind add Menu KEY
Note from @Vantl: I have added a bat file that can be run to block the network connections of the Client, Good for extra security.
Download: (PW: hvh.net )
SS:
Note from @Vantl: I have added a bat file that can be run to block the network connections of the Client, Good for extra security.
Download: (PW: hvh.net )
You must be registered for see links
You must be registered for see links
You must be registered for see links
SS:
"
CaRtiEss
Newbie HvHer
User ID:
131093
yumesoft/al/_do.class
Stealer_Crypto_Wallet
"
idk if its real but just dont use it, look like malware imo (the free one) lot of files spamming telegram channel
it is malware i checked it on most servers nand it got 100% season token stealer about more im not sureuses discord rich presence, 99% of the code is obfuscated, useYou must be registered for see links4 deobf
Safe Net Thread 'Rockstar 2.0 Client'
Use the legacy or Prism launcher on the version 1.21.4 Fabric, if it doesn't work , try downloading fabric api , bind gui with .bind add Menu KEY
Note from @Vantl: I have added a bat file that can be run to block the network connections of the Client, Good for extra security.
Download: (PW: hvh.net )
You must be registered for see linksYou must be registered for see links
You must be registered for see links
SS:
"
CaRtiEss
Newbie HvHer
User ID:
131093
yumesoft/al/_do.class
Stealer_Crypto_Wallet
"
idk if its real but just dont use it, look like malware imo (the free one) lot of files spamming telegram channel
AES Encryption is now flagged as Malware? Do some proper Analysis on the binary you have at hand instead of mindlessing dragging it into some WebGUI and pretending you can tell us with 100% certainty that its malware, i am sure the admins on this site did some proper RE work on it. ReCaf is free btw.
first one my friend @calloc0x75 say that:
"ReCaf is free btw."
second how tf you gonna say rockstar client 2.0 free by goonglang it gonna be a rat If you aren't 100% verifying that it's some goddamn son-of-a-bitch malware...
The evidence you're showing is neither concrete nor coherent; you sound like some guy who bought his PC yesterday and thinks he can instantly detect malware using an AI jar scanner. People like you—it's because of stupid people like you that people in Africa are starving.
And thirdly, your post counts as spam if you don't provide coherent proof and verify whether it's actually a RAT.
Discord RPC infastructure is present, anything other networking related is dormant or dead code, the C2 (rocknet) is never called in this build,
you can gladly check this for yourself the relevant files to this are in:
yumesoft\log\_while.java
yumesoft\T\while_0.java
moscow\rockstar\Rockstar.java
Other Networking functionality include avatar fetcher from "api.rockstar.moscow"
A empty webhook sender that once lived here "89.111.169.151:10020", which is fully stubbed out.
Thats really all there is i dont wanna blow the scope so ill leave it at that, do your work properly instead of fear mongering and making a fool out of yourself.
Furthermore if you want the decompiled Jar i would gladly send it to you over discord so you can find some proof of your claims yourself.
