Jun 19, 2026, 10:54 PM
PennyC2 Stealer It is a software program that we developed using the language python: 3.. This software works to steal passwords and cookies and credit card and history and auto fill and downloads from Chromium-based browsers, supporting all technologies used by t he browser to encrypt and store the encryption key V10 V11 v20+ To extract a key, we say by impersonating an identity, a process that exists in a system called lsass.exe With the ability to disable windows defender And revealed the analysis environments and revealed debugger He revealed the virtual environments in addition.....
And he steals all of files steal network info open camera steal all process and screenshot and setup clipper in System32 and create Registry Key in "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" fack error .Steal all system info.
Xor and Base64 encryption is used to hide clipper iniside Lich.
--------------------------------------------------------------------------------------------------
send result-LOG.zip To TelegramBot and discordChanle
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Steal Discord Token.
anti Vm and anti debug and detact all analysis tools
Wallet: Zcash, Armory, Bytecoin, Jaxx, Exodus, Ethereum, Electrum, AtomicWallet, Cake Wallet, Guarda, Coinomi, Exodus
Ftp: FileZilla, WinSCP, Auto FTP Manager, FTP Manager Lite, FTPRush, SmartFTP, Cyberduck,
Wallet Extensions: Authenticator, Binance, Bitapp, BoltX, Coin98, Coinbase, Core, Crocobit, Equal, Ever, ExodusWeb3, Fewcha, Finnie, Guarda, Guild, HarmonyOutdated, Iconex, Jaxx Liberty, Kaikas, KardiaChain, Keplr, Liquality, MEWCX, MaiarDEFI, Martian, Math, Metamask, Metamask2, Mobox, Nami, Nifty, Oxygen, PaliWallet, Petra, Phantom, Pontem, Ronin, Safepal, Saturn, Slope, Solfare, Sollet, Starcoin, Swash, TempleTezos, TerraStation, Tokenpocket, Ton, Tron, Trust Wallet, Wombat, XDEFI, XMR.PT, XinPay, Yoroi, iWallet
database: HeidSql, DBeaver
games: Epic Games, Riot Games, Uplay, NationsGlory,
Minecraft Lancher: Intent Lunar, TLauncher, Feather, Meteor, Impact, Novoline, CheatBreakers,Microsoft Store, Rise, Rise (Intent), Paladium, PolyMC,Badlion.
emailes: Microsoft Outlook, Thunderbird.
"Ledger Live"
password manager: Norton\_Password\_Manager, 1Password, Bitwarden, NordPass
remote desktop: TeamViewer, AnyDesk, RealVNC, TightVNC, UltraVNC
vpn: Cisco AnyConnect VPN, OpenVPN, NordVPN, ProtonVPN
ide: Visual Studio Code, Git for Windows
client files: and steal files from Desktop, Downloads, Documents, Videos, Pictures, Music, OneDrivechat
client: Telegram, Discord, Skype, Element, Signal, Viber, Pidgin, **WhatsApp, Session, Wire, Slack, Teams, ICQ, Line,
cisco: Cisco\\Cisco AnyConnect Secure Mobility Client\\Profiletelegram
walled addres : BTC_LEGACY, BTC_P2SH, BTC_SEGWIT, BTC_TAPROOT, LTC, LTC_P2SH, LTC_SEGWIT, ETH_EVM, METAMASK, XRP, XLM, DOGE, BCH, COSMOS, BNB, ADA, TRX, AVAX
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
for more details ⬇️
QTox id : F470F216615F4A26D082032A759766B5D6DD8CFA8A80B5EFCB5163035E1FA835B2A09086F483
Session: 059cf086ff68c881258a63dc47d57d6f3195222728ca98e76cb3e797aceb805c69
And he steals all of files steal network info open camera steal all process and screenshot and setup clipper in System32 and create Registry Key in "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" fack error .Steal all system info.
Xor and Base64 encryption is used to hide clipper iniside Lich.
--------------------------------------------------------------------------------------------------
send result-LOG.zip To TelegramBot and discordChanle
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Steal Discord Token.
anti Vm and anti debug and detact all analysis tools
Wallet: Zcash, Armory, Bytecoin, Jaxx, Exodus, Ethereum, Electrum, AtomicWallet, Cake Wallet, Guarda, Coinomi, Exodus
Ftp: FileZilla, WinSCP, Auto FTP Manager, FTP Manager Lite, FTPRush, SmartFTP, Cyberduck,
Wallet Extensions: Authenticator, Binance, Bitapp, BoltX, Coin98, Coinbase, Core, Crocobit, Equal, Ever, ExodusWeb3, Fewcha, Finnie, Guarda, Guild, HarmonyOutdated, Iconex, Jaxx Liberty, Kaikas, KardiaChain, Keplr, Liquality, MEWCX, MaiarDEFI, Martian, Math, Metamask, Metamask2, Mobox, Nami, Nifty, Oxygen, PaliWallet, Petra, Phantom, Pontem, Ronin, Safepal, Saturn, Slope, Solfare, Sollet, Starcoin, Swash, TempleTezos, TerraStation, Tokenpocket, Ton, Tron, Trust Wallet, Wombat, XDEFI, XMR.PT, XinPay, Yoroi, iWallet
database: HeidSql, DBeaver
games: Epic Games, Riot Games, Uplay, NationsGlory,
Minecraft Lancher: Intent Lunar, TLauncher, Feather, Meteor, Impact, Novoline, CheatBreakers,Microsoft Store, Rise, Rise (Intent), Paladium, PolyMC,Badlion.
emailes: Microsoft Outlook, Thunderbird.
"Ledger Live"
password manager: Norton\_Password\_Manager, 1Password, Bitwarden, NordPass
remote desktop: TeamViewer, AnyDesk, RealVNC, TightVNC, UltraVNC
vpn: Cisco AnyConnect VPN, OpenVPN, NordVPN, ProtonVPN
ide: Visual Studio Code, Git for Windows
client files: and steal files from Desktop, Downloads, Documents, Videos, Pictures, Music, OneDrivechat
client: Telegram, Discord, Skype, Element, Signal, Viber, Pidgin, **WhatsApp, Session, Wire, Slack, Teams, ICQ, Line,
cisco: Cisco\\Cisco AnyConnect Secure Mobility Client\\Profiletelegram
walled addres : BTC_LEGACY, BTC_P2SH, BTC_SEGWIT, BTC_TAPROOT, LTC, LTC_P2SH, LTC_SEGWIT, ETH_EVM, METAMASK, XRP, XLM, DOGE, BCH, COSMOS, BNB, ADA, TRX, AVAX
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
for more details ⬇️
QTox id : F470F216615F4A26D082032A759766B5D6DD8CFA8A80B5EFCB5163035E1FA835B2A09086F483
Session: 059cf086ff68c881258a63dc47d57d6f3195222728ca98e76cb3e797aceb805c69
