Sbot crack 1.038

[Kraip]

Hey guys, there is currently a cracked sbot running around in the silkroad scene, but nobody is sharing it, currently playing at eagle many player sell it for silk, most of them are turkish...probably released in a turkish forum?

The weird thing, they all got the same version if you ask them 1.0.3.8
Would be great if someone can upload it here.

Edit: Thanks to rares495
DL Link:

Originally Posted by $WeGs

so...
SBotP_1.0.38.exe (Orignal One) Packed with themida/winlicense it's also infacted

Detection ratio: 3 / 58
malicious (moderate confidence)
HEUR/QVM19.1.Malware.Gen
Trojan.MedfosCRTD.Win32.8488

Download link from bot-cave

 Download

 Virustotal

how the login process working ?
connecting to login server (212.224.100.138:13357)
then send encrypted login data/HWID and wait the confirm from the server

---
SBotP_1.0.38.exe (Cracked by Shiva One) was Packed with themida/winlicense then unpacked and dumped

i can confirm that cracked one dosen't have any kind of (out going connection , downloading files ,nothing added to startup , or even infacted my pc with anykind of virus (node32 running) )

Detection ratio: 25 / 58

 Virustotal

The difference between packed and unpacked of Detection it's cuz the packed method.

how this bot got cracked ?
by nop/jump the login process.

so after all i can confirm that cracked sbot version is safe to use..

[Haxor]

Proof that its cracked?
Some turkish age 10 kids talking is not enough

[Kraip]

I've no proof, but there is not only 1 guy who is selling it, there are many.
Also one of my guild got it but he is also selling it, kinda weird

[sarkoplata]

I've checked some famous turkish forums (there arent many these days) and could not find anything related to it... could be fake

[OutlawNL]

It is true indeed. Source: Using it on laptop.
Don't feel like it's safe to use though.

[nicktop1]

Can confirm what Outlaw is saying. Got it my mega cloud but I rather use a normal sbot account for my main account.

[Smukke]

Originally Posted by OutlawTR

It is true indeed. Source: Using it on laptop.
Don't feel like it's safe to use though.

Of course you would have it.

[rares495]

There you go. Sharing it cuz someone told me not to and he's been a ****. Enjoy!

[Km3t1007]

Originally Posted by rares495

There you go. Sharing it cuz someone told me not to and he's been a **** so **** him. Enjoy!

How does this even work ? It always says I have to download a updated version of the bot :P

[OutlawNL]

Originally Posted by rares495

There you go. Sharing it cuz someone told me not to and he's been a **** so **** him. Enjoy!

If this is a serious link, use it at your own risk. it is not safe whatsoever.

[Kraip]

Originally Posted by rares495

There you go. Sharing it cuz someone told me not to and he's been a **** so **** him. Enjoy!

Thank you, it is working fine, but got some virus on

[theross]

Interesting
Seems to work. let's rip the executable apart and see what it does
I'll be reporting about any relevant result.

[Haxor]

Originally Posted by theross

Interesting
Seems to work. let's rip the executable apart and see what it does
I'll be reporting about any relevant result.

Check in the way if the bot sends anything outside(for example username/pass to who cracked it xD)

There is something weird...

[theross]

nothing suspicious so far.
no writing in registry / weird windows or temp directories, no sending the login credentials to other IPs besides the IP of the login server of the pserver.
this doesn't mean it's safe!

[rares495]

Originally Posted by OutlawNL

If this is a serious link, use it at your own risk. it is not safe whatsoever.

Forgot to write that myself. I don't know who cracked it and whether or not it is safe to use.

Originally Posted by Km3t1007

How does this even work ? It always says I have to download a updated version of the bot :P

It was working like a month ago. Not sure if it's still working now because i'm not playing silkroad atm.