+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Dark Saddow Crypter**FUD Scan-Time & Run Time**No $hitC@sh** (/showthread.php?tid=1232289)
* - dark_sasddow - Apr 22, 2011
(Apr 22, 2011 12:13 AM)Sweby Wrote: Thx bro, this work good. I crypt My DarkComet server. It is not FUD, it's detected by AVIRA like dropper. Anyway, good job.
May Be you need to change icon
i will re-fud stub soon
* - -mothered- - Apr 22, 2011
Please provide a direct link to the virus scan report, and I'll take It from there.
Thanks.
* - aagibcheat - Apr 22, 2011
I dont get it.
Whats the RAR password?
* - dark_sasddow - Apr 22, 2011
(Apr 22, 2011 03:06 AM)mothered Wrote: Please provide a direct link to the virus scan report, and I'll take It from there.Here It Is Bro...
Thanks.
http://vscan.novirusthanks.org/analysis/4ece2035d35e65bd8805301e70328c86/c3R1Yi1leGU=/
(Apr 22, 2011 03:23 AM)aagibcheat Wrote: I dont get it.You have to decrypt password
Whats the RAR password?
Bro....
* - superboy132 - Apr 22, 2011
Is this any good? Does it even work? Is it safe to download? And what is the detection rate?
* - daniels - Apr 22, 2011
people my eset smart security tells me that this is a trojan dropper....
use it on your own risk...
* - reyn45 - Apr 22, 2011
Thanks for this, works great. Truly needed something like this.
* - dark_sasddow - Apr 22, 2011
(Apr 22, 2011 11:38 PM)daniels Wrote: people my eset smart security tells me that this is a trojan dropper....
use it on your own risk...
Lol it is crypter and trojan use sandboxie if you want
(Apr 22, 2011 11:47 PM)reyn45 Wrote: Thanks for this, works great. Truly needed something like this.
Happy to help you🤝
* - princeshama - Apr 23, 2011
wrong password infected post
* - dark_sasddow - Apr 23, 2011
(Apr 23, 2011 02:02 AM)princeshama Wrote: wrong password infected post
I do not think so lol..😠
* - felicixus - Apr 23, 2011
Hey, man =)
This is a good crypter, however is only scantime and the stub is detected 2/33
Here for you a free anonymous scan:
File Info
Report date: 2011-04-23.
Scan Occured: [img]http://my-avscan.com/result_time.php?t=i&w=MjA0Nzg=[/img]
Link to scan: http://my-avscan.com/result.php?scan=MjA0Nzg=
File name: stub.exe
File size: 187904 bytes
MD5 Hash: 4ece2035d35e65bd8805301e70328c86
SHA1 Hash: 0d7ed632e5efbcfd3d79e027c79159605180d539
Detection rate: 2 out of 33
Status: INFECTED
Detections
AVG - Trojan horse Dropper.Generic3.BHLD.
Acavir - Clean.
Avast 5 -Clean.
Avast -Clean.
Avira -Clean.
BitDefender -Clean.
VirusBuster Internet Security -Clean.
Clam Antivirus -Clean.
COMODO Internet Security -Clean.
DrWeb -Clean.
eTrust-Vet -Clean.
F-PROT Antivirus -Clean.
F-Secure Internet Security -Clean.
G Data -Clean.
IKARUS Security-Clean.
Kaspersky Antivirus -Clean.
McAfee -Clean.
MS Security Essentials -Clean.
ESET NOD32 -Trojan.MSIL/TrojanDropper.Agent.AXMNHTrojan.MSIL/TrojanDropper.Agent.AXEN.
Norman -Clean.
Norton -Clean.
Panda Security -Clean.
A-Squared Security -Clean.
Quick Heal Antivirus -Clean.
Rising Antivirus -Clean.
Solo Antivirus -Clean.
Sophos -Clean.
Trend Micro Internet Security -Clean.
VBA32 Antivirus -Clean.
Vexira Antivirus -Clean.
Webroot Internet Security -Clean.
Zoner AntiVirus -Clean.
AhnLab V3 Internet Security -Clean.
Scan report generated by
my-avscan.com
Crypter file become 6/33 .-.
You need to rename strings, and add junk code. Also a assembly changer and an icon changer will be great and wll remove after crypting detection:
File Info
Report date: 2011-04-23.
Scan Occured: [img]http://my-avscan.com/result_time.php?t=i&w=MjA0ODE=[/img]
Link to scan: http://my-avscan.com/result.php?scan=MjA0ODE=
File name: crypted.exe
File size: 469016 bytes
MD5 Hash: ffdb60f3d4afa3963443d06f1dfd04d7
SHA1 Hash: 1bf850b5577d96c5845253376d71551101e85a32
Detection rate: 6 out of 33
Status: INFECTED
Detections
AVG - Trojan horse Dropper.Generic3.BHLD.
Acavir - Clean.
Avast 5 -Clean.
Avast -Clean.
Avira -TR/Dropper.Gen.
BitDefender -Clean.
VirusBuster Internet Security -Clean.
Clam Antivirus -Clean.
COMODO Internet Security -Clean.
DrWeb -Clean.
eTrust-Vet -Clean.
F-PROT Antivirus -Clean.
F-Secure Internet Security -Gen:Heur.MSIL.Krypt.2.
G Data -Gen:Heur.MSIL.Krypt.2 (Engine-A).
IKARUS Security-Clean.
Kaspersky Antivirus -Clean.
McAfee -Clean.
MS Security Essentials -Clean.
ESET NOD32 -Trojan.MSIL/TrojanDropper.Agent.AXMNHTrojan.MSIL/TrojanDropper.Agent.AXEN.
Norman -Clean.
Norton -Clean.
Panda Security -Suspicious.
A-Squared Security -Clean.
Quick Heal Antivirus -Clean.
Rising Antivirus -Clean.
Solo Antivirus -Clean.
Sophos -Clean.
Trend Micro Internet Security -Clean.
VBA32 Antivirus -Clean.
Vexira Antivirus -Clean.
Webroot Internet Security -Clean.
Zoner AntiVirus -Clean.
AhnLab V3 Internet Security -Clean.
Scan report generated by
my-avscan.com
* - dark_sasddow - Apr 23, 2011
@ felicinox
what
my-avscan.com will send file simple to av company??
* - Harsh Gupta - Apr 23, 2011
Is it supports all type of RAT including dark comet?
* - bigit1029 - Apr 23, 2011
if its not infected would you mind scanning on virustotal?
* - dark_sasddow - Apr 23, 2011
(Apr 23, 2011 05:57 AM)bigit1029 Wrote: if its not infected would you mind scanning on virustotal?
Idiot Do not scan on virus total or it wil be no longer fud
(Apr 23, 2011 05:50 AM)Harsh Gupta Wrote: Is it supports all type of RAT including dark comet?
I have not check it on all but you can try and tell us..