+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: [Tut] Tips for .bat RAT spreading [Good for your first 60 or so slaves] (/showthread.php?tid=4597065)
[Tut] Tips for .bat RAT spreading [Good for your first 60 or so slaves] - 1x1x1 - Dec 22, 2014
Hi HF, this is my first tutorial, and my first contribution post. These are just some methods that I have used, successfuly, to spread my .bat RAT. Keep in mind, these methods are NOT for infecting people with a lot of computer knowledge. These methods take advantage of the fact that many people don't even know what a .bat file is.
First of all, of course, you'll need to compile your stub as a .bat.
Method #1: "It's a video"
This method is pretty simple. Lots of people don't know what a .bat file is, and simply calling it a video could get them to execute it. (it doesn't have to be a video, you could also say it's an image, document, plugin/extension for something, ect) This method can be made a LOT easier if you compile your stub as a .exe, crypt it FUD, then use a .exe to .bat converter. I haven't tried crypting yet, so I'm not 100% sure .bat files can be crypted.
Additional tip for Method #1: Bind the .bat to a REAL video/image.
Method #2: "The encrypted code"
This method is a little more complicated. This method is were you, after compiling your .bat RAT, rename the .bat extension to .txt. You can then open it up, copy all the "encrypted" code, and put it on somewhere like Pastebin. You then, in your video tutorial/however you're spreading, tell them to make a new .txt file on there desktop. You then tell them to go to the link in the video, or whatever you're using, and copy the "encrypted" code. (Note: calling it "encrypted", and making up a reason (such as: "I don't want it to get leaked!", can lower suspicion.)
Tell then to paste the "encrypted" code into the .txt file they made earlier. Then, to "decrypt" it, rename the extension to .bat. Tell them to open it, and it will decrypt.
Additional tips for Method #2: Encrypt an archive, and bind a .txt file WITH a password to your .bat. This way, you can tell them that opening the .bat will decrypt the text, giving them the password. Once they open it, the .txt file will open with the password, and chances are, they won't even realize they've been ratted.
Please post what you think of my tutorial :)
These are just some of MY original methods for ratting. They've proven to be quite successful for me, and it's a good way to get your first 50 or so slaves.
Got any questions? Feel free to send me a PM about this post, or anything else RAT related :)
I forgot to mention, you can ALSO do the second method with exe files, it just isn't as convincing.