QZK RAT

It integrates remote access, credential theft, ransomware deployment, cryptocurrency mining, clipboard hijacking, and persistence features into one centralized interface.
The QZK Binder module is designed to combine malicious payloads with legitimate-looking files.
The Hidden Crypto Miner module is focuses on unauthorized cryptocurrency mining using victim hardware resources.
The Crypto Clipper module is designed to hijack cryptocurrency transactions by monitoring clipboard activity and replacing copied wallet addresses.
The Hidden RDP module enables stealth remote desktop access without the victim’s knowledge.
The HTA Exploit module creates malicious HTML Application files capable of executing scripts and commands on Windows systems.
The JS Exploit module generates malicious JavaScript payloads often distributed through phishing emails or compromised websites.
The Ink Exploit module focuses on malicious Windows shortcut files designed to execute hidden commands in the background.
The Macro Excel Exploit module creates malicious Microsoft Office documents capable of delivering malware when macros are enabled.
The ransomware module extends beyond surveillance and theft by enabling file encryption and extortion operations.
The Remote Execute functionality focuses on remotely launching commands, scripts, or malware payloads on infected systems.
The UAC Bypass module focuses on privilege escalation techniques that help malware gain elevated acces
The Start Crypto Miner Builder section provides a detailed interface for creating customized hidden cryptocurrency miners.