+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: Security Problemes during finding slaves (/showthread.php?tid=4773647)
Security Problemes during finding slaves - Blashyrkh666 - Apr 11, 2015
Hi,
I'm new here and I have no experience with RATs.
I set up NanoCore and build my server.exe
Then I crypted the server.exe with RazorCrypt V2 and changed the icon.
Then I send it to a lot of people.
My problem is that a everybody can't open the file because of security problemes.
Windows or their AV blocks this file every time.
I checked the file on virustotal and the result was 1/57.
What could be the probleme?
can anybody help me?
* - FreeAnneFrank - Apr 11, 2015
Please don't scan your stub at virustotal as virustotal distributes their scans to antivirus sites, which means makes your stub detectable for more AV's. Check your stub at razorscan or http://refud.me
* - Blashyrkh666 - Apr 11, 2015
(Apr 11, 2015 11:08 AM)1312 Wrote: Please don't scan your stub at virustotal as virustotal distributes their scans to antivirus sites, which means makes your stub detectable for more AV's. Check your stub at razorscan or http://refud.me
Thanks for the tip.
Razorscan result is 3/35.
AntiVir (Avira) find a virus.
I think this could be the problem because the most people here in germany use this AV.
* - Cannooo - Apr 11, 2015
(Apr 11, 2015 11:17 AM)Blashyrkh666 Wrote: Thanks for the tip.
Razorscan result is 3/35.
AntiVir (Avira) find a virus.
I think this could be the problem because the most people here in germany use this AV.
And the result will get worse and worse everyday just because you uploaded to VT. I recommend waiting for next RazorCrypt's update.
* - Kongou - Apr 11, 2015
Do not rename your crypted build from Razorcrypt. For some reason it corrupts the file.
* - OTRKendo - Apr 11, 2015
Make sure not to scan it on certain sites, if so.. May Decrypt.