+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Remote Administration Tools (https://hackforums.net/forumdisplay.php?fid=114)
+---- Thread: How to setup Babylon RAT & FUD Crypt it using Dragon Crypter (/showthread.php?tid=4821258)
How to setup Babylon RAT & FUD Crypt it using Dragon Crypter - Business - May 14, 2015
This tutorial is intended for educational use only, anything you do with what you learn is your responsibility.
Anyone that has purchased Babylon RAT will tell you how fast the features are, how stable it is, etc. However, many people often struggle when transitioning from a free RAT to a paid one. If you are having difficulty, don't feel bad! You are not alone. RAT setups can be tricky for new users. This tutorial is dedicated to helping all Babylon RAT customers with their setup. It will also cover how to use 143 VPN to port forward, and there will be a quick demonstration of Dragon Crypter.
If you see this image during the thread, it signals a pause in the tutorial. Take this time to ensure that everything you did in the last step is working properly.
The image:
![[Image: 0LZDdJC.png]](https://i.imgur.com/0LZDdJC.png)
The first thing you will want to do when you download Babylon is to create a folder on your desktop and move the archive file into it. Once you do so, extract it into that same folder.
Spoiler (Click to View)
The next step is to run Babylon as admin. You should always run it as admin.
Spoiler (Click to View)
You may get a notification on your computer from Smart Screen, simply press "More info", and then press "Run anyways".
Spoiler (Click to View)
You will now be greeted by NetSeal. Create an account, and then enter your key (Given to you by someone on the Babylon team) into the serial code field.
Now, Babylon RAT should open. It will look like this:
Spoiler (Click to View)
Anyone that has purchased Babylon RAT will tell you how fast the features are, how stable it is, etc. However, many people often struggle when transitioning from a free RAT to a paid one. If you are having difficulty, don't feel bad! You are not alone. RAT setups can be tricky for new users. This tutorial is dedicated to helping all Babylon RAT customers with their setup. It will also cover how to use 143 VPN to port forward, and there will be a quick demonstration of Dragon Crypter.
If you see this image during the thread, it signals a pause in the tutorial. Take this time to ensure that everything you did in the last step is working properly.
The image:
The first thing you will want to do when you download Babylon is to create a folder on your desktop and move the archive file into it. Once you do so, extract it into that same folder.
Spoiler (Click to View)
![[Image: 5c396b12015d33e792fe134443b8be6d.gif]](https://i.gyazo.com/5c396b12015d33e792fe134443b8be6d.gif)
The next step is to run Babylon as admin. You should always run it as admin.
Spoiler (Click to View)
![[Image: 48c26f600d9deb322a15758b73299614.gif]](https://i.gyazo.com/48c26f600d9deb322a15758b73299614.gif)
You may get a notification on your computer from Smart Screen, simply press "More info", and then press "Run anyways".
Spoiler (Click to View)
![[Image: f48d8e72c061a655794a7891b2f2337a.gif]](https://i.gyazo.com/f48d8e72c061a655794a7891b2f2337a.gif)
You will now be greeted by NetSeal. Create an account, and then enter your key (Given to you by someone on the Babylon team) into the serial code field.
Now, Babylon RAT should open. It will look like this:
Spoiler (Click to View)
![[Image: 2faf58bc011746db0b4e42ce9ecbd6c2.png]](https://i.gyazo.com/2faf58bc011746db0b4e42ce9ecbd6c2.png)
* - Business - May 14, 2015
Before we can start using Babylon, there are a couple things we need to do. The first, is download Duck DNS and set up a DNS hostname/domain.
Start by heading to their site, which you can find below
Duck DNS site
Next thing we need to do is sign in.
In the top right of the homepage there are multiple options for signing into Duck DNS, you can pick whichever one you prefer
![[Image: 4296b1d59915ef6ffd28b7b84b048597.png]](https://i.gyazo.com/4296b1d59915ef6ffd28b7b84b048597.png)
Once you sign in, you will be greeted by a page like this (I have blanked out certain parts of this thread for obvious reasons):
![[Image: 6020d53fd6f031f9d45edf05e7df1370.png]](https://i.gyazo.com/6020d53fd6f031f9d45edf05e7df1370.png)
Next thing we are going to do, is choose a DNS hostname/domain.
In the middle of the page, there is a place to fill out this hostname. You may choose whatever you want, then press "add domain".
![[Image: 0ce7b191164c6c69966da48db6cc391b.png]](https://i.gyazo.com/0ce7b191164c6c69966da48db6cc391b.png)
Your hostname is what you will use as your IP/DNS when making your file in Babylon later on in this guide.
I suggest making your hostname something you will remember.
The next step in our setup process is port forwarding. I have already created a very extensive guide on this process, and you can find it here:
Port Forwarding Guide
Please take this time to double check that you have successfully port forwarded. Once you are sure that you have, you are ready to follow the rest of this guide.
The next step is to listen to your port within Babylon. To do this, click "File" in the top left corner, then press "Settings".
Spoiler (Click to View)
Now that you are in the settings tab, you will want to right click within the table, and select "Add".
Spoiler (Click to View)
A window should pop up that looks like this:
Spoiler (Click to View)
Enter the port you forwarded within the text field, and press "Ok".
Next, you will be greeted by another pop up, this is where you will enter your network key. This key can be anything you want, just make sure you can remember it for later!
The final pop up will now show up, asking you to select a family. Type "2", and press "Ok".
Now, you should have a new entry in your "Settings" window. It will look something like this:
Spoiler (Click to View)
Start by heading to their site, which you can find below
Duck DNS site
Next thing we need to do is sign in.
In the top right of the homepage there are multiple options for signing into Duck DNS, you can pick whichever one you prefer
Once you sign in, you will be greeted by a page like this (I have blanked out certain parts of this thread for obvious reasons):
Next thing we are going to do, is choose a DNS hostname/domain.
In the middle of the page, there is a place to fill out this hostname. You may choose whatever you want, then press "add domain".
Your hostname is what you will use as your IP/DNS when making your file in Babylon later on in this guide.
I suggest making your hostname something you will remember.
The next step in our setup process is port forwarding. I have already created a very extensive guide on this process, and you can find it here:
Port Forwarding Guide
Please take this time to double check that you have successfully port forwarded. Once you are sure that you have, you are ready to follow the rest of this guide.
The next step is to listen to your port within Babylon. To do this, click "File" in the top left corner, then press "Settings".
Spoiler (Click to View)
![[Image: 229de22bf235dd21570b3104855edb00.gif]](https://i.gyazo.com/229de22bf235dd21570b3104855edb00.gif)
Now that you are in the settings tab, you will want to right click within the table, and select "Add".
Spoiler (Click to View)
![[Image: 0adaf02e2cb95299cad8b9d60828f73e.gif]](https://i.gyazo.com/0adaf02e2cb95299cad8b9d60828f73e.gif)
A window should pop up that looks like this:
Spoiler (Click to View)
![[Image: 78f2796c03f339a3e3f609ce47f40524.png]](https://i.gyazo.com/78f2796c03f339a3e3f609ce47f40524.png)
Enter the port you forwarded within the text field, and press "Ok".
Next, you will be greeted by another pop up, this is where you will enter your network key. This key can be anything you want, just make sure you can remember it for later!
The final pop up will now show up, asking you to select a family. Type "2", and press "Ok".
Now, you should have a new entry in your "Settings" window. It will look something like this:
Spoiler (Click to View)
![[Image: 55329fbd88cf74ab29afaf24eb680006.png]](https://i.gyazo.com/55329fbd88cf74ab29afaf24eb680006.png)
* - Business - May 14, 2015
If your "Settings" tab looks similar to mine, you are ready to continue.
The next step is to create your stub. "Stub" is a commonly used term for the file that you create within your RAT.
To start this process, we will click "File" once again. This time, however, you will choose the "Builder" tab, then select "Client".
Spoiler (Click to View)
A pop up will appear, it should look like this:
Spoiler (Click to View)
You are now in the Builder.
In the Builder, the first thing that you will be doing is adding your DNS hostname/domain to the "DNS 1" text field. You can use both DNS boxes if you have two DNS hostnames/domains and you want to use both.
Your hostname from Duck DNS should look something like this:
"exampletest.duckdns.org"
Following up with our previous step, you will be adding the port that you forwarded to the "Port" text field.
Spoiler (Click to View)
Finally, you need to add the same network key that you used in the "Settings" tab earlier to the "Key" text field. You can check the "Visible" box to make sure you wrote it correctly. You can delete the text in the fields for "DNS 2" if you are not using it.
This is the end of our steps in the "Network" tab of our Builder.
The next step is to create your stub. "Stub" is a commonly used term for the file that you create within your RAT.
To start this process, we will click "File" once again. This time, however, you will choose the "Builder" tab, then select "Client".
Spoiler (Click to View)
![[Image: 63425d1de93ddea4e4a0bf05d7de7b9f.gif]](https://i.gyazo.com/63425d1de93ddea4e4a0bf05d7de7b9f.gif)
A pop up will appear, it should look like this:
Spoiler (Click to View)
![[Image: e20dea137caab8d7c6ad132c9cdb7d68.png]](https://i.gyazo.com/e20dea137caab8d7c6ad132c9cdb7d68.png)
You are now in the Builder.
In the Builder, the first thing that you will be doing is adding your DNS hostname/domain to the "DNS 1" text field. You can use both DNS boxes if you have two DNS hostnames/domains and you want to use both.
Your hostname from Duck DNS should look something like this:
"exampletest.duckdns.org"
Following up with our previous step, you will be adding the port that you forwarded to the "Port" text field.
Spoiler (Click to View)
![[Image: 0975bee896b4263dbf482811cbc3b9b7.gif]](https://i.gyazo.com/0975bee896b4263dbf482811cbc3b9b7.gif)
Finally, you need to add the same network key that you used in the "Settings" tab earlier to the "Key" text field. You can check the "Visible" box to make sure you wrote it correctly. You can delete the text in the fields for "DNS 2" if you are not using it.
This is the end of our steps in the "Network" tab of our Builder.
* - Business - May 14, 2015
Once you have successfully filled out everything in the "Network" tab, you are ready to move on to the "Installation" tab.
Spoiler (Click to View)
There is not much to do in the "Installation" tab, and you it also optional. Some users like to check this setting, others do not. I personally advise you not to. I have had better results in my testing by leaving it off.
Now you are ready to move onto the next tab, the "Process" tab.
The only thing that I recommend for this tab is spamming the "Instance Control" a couple of times.
Spoiler (Click to View)
In our final step, we will be looking at the "Other" tab. This tab is also very easy to set up. All you need to do, is make sure that these boxes are checked:
Spoiler (Click to View)
Now that we have chosen all of our settings, we are ready to build our stub. At the bottom right, you will see a "Build" button, press it now.
Spoiler (Click to View)
To complete the process, name your file and save it to your desired location. I suggest keeping everything together for easy access.
Spoiler (Click to View)
![[Image: 9cd8bcccfe80899863a95ffbeed8d738.png]](https://i.gyazo.com/9cd8bcccfe80899863a95ffbeed8d738.png)
There is not much to do in the "Installation" tab, and you it also optional. Some users like to check this setting, others do not. I personally advise you not to. I have had better results in my testing by leaving it off.
Now you are ready to move onto the next tab, the "Process" tab.
The only thing that I recommend for this tab is spamming the "Instance Control" a couple of times.
Spoiler (Click to View)
![[Image: 9cbf37b94dace68f1eb6c792e454cd4a.gif]](https://i.gyazo.com/9cbf37b94dace68f1eb6c792e454cd4a.gif)
In our final step, we will be looking at the "Other" tab. This tab is also very easy to set up. All you need to do, is make sure that these boxes are checked:
Spoiler (Click to View)
![[Image: 034b8625eabf0238eb20cc5a1b7d16e8.gif]](https://i.gyazo.com/034b8625eabf0238eb20cc5a1b7d16e8.gif)
Now that we have chosen all of our settings, we are ready to build our stub. At the bottom right, you will see a "Build" button, press it now.
Spoiler (Click to View)
![[Image: 2e2d4b58db32f85643b1a3515d769d32.png]](https://i.gyazo.com/2e2d4b58db32f85643b1a3515d769d32.png)
To complete the process, name your file and save it to your desired location. I suggest keeping everything together for easy access.
* - Business - May 14, 2015
Now I will show you how to crypt your stub in Dragon Crypter. These settings are recommended and will result in a FUD stub. FUD duration is extremely long with Dragon Crypter, and it is updated frequently.
When you download Dragon Crypter, move it to your desktop for easy access. Now, run the program found within the archive.
You may get a Smart Screen notification, you can just hit "More Info", and then 'Run Anyways".
Spoiler (Click to View)
Once you have signed into Net Seal, you will be greeted by Dragon Crypter's main screen:
Spoiler (Click to View)
The first thing you will want to do is find your file from within Dragon. You can do this by clicking the three little dots next to "Browse File".
Spoiler (Click to View)
Next, choose which execution option you would like to use. I usually leave mine as is. Now select the "Settings" tab.
These are the settings I suggest for this tab, they are great for making your file hard to remove. If you need to control a computer of yours for a very long time, these are the perfect settings for you:
Spoiler (Click to View)
After selecting these, you can move onto the "Assembly" tab. The only thing I recommend doing here is to spam "Randomize" a few times.
Spoiler (Click to View)
The final tab is the "Build" tab itself. This is our final stop for making a FUD crypt.
Select these settings:
Spoiler (Click to View)
Once you have done so, click "Crypt Payload" and name your new crypted stub. It will now create your file, and if it works properly, you will get a pop up like this:
Spoiler (Click to View)
Now, head over to the scanner found within Dragon Crypter and scan your file. You can also use any scanning site that does not distribute samples.
Spoiler (Click to View)
Once you have scanned it and have seen that it is FUD, you are ready to send your file to your computers that you need to control!
When you download Dragon Crypter, move it to your desktop for easy access. Now, run the program found within the archive.
You may get a Smart Screen notification, you can just hit "More Info", and then 'Run Anyways".
Spoiler (Click to View)
![[Image: 2c92b217557c87eca4e4d795e618ae04.gif]](https://i.gyazo.com/2c92b217557c87eca4e4d795e618ae04.gif)
Once you have signed into Net Seal, you will be greeted by Dragon Crypter's main screen:
Spoiler (Click to View)
![[Image: 6afa278c271a3251c01f4deccdd694e7.png]](https://i.gyazo.com/6afa278c271a3251c01f4deccdd694e7.png)
The first thing you will want to do is find your file from within Dragon. You can do this by clicking the three little dots next to "Browse File".
Spoiler (Click to View)
![[Image: 332bd74b2f542f7963c8715e50bb0840.gif]](https://i.gyazo.com/332bd74b2f542f7963c8715e50bb0840.gif)
Next, choose which execution option you would like to use. I usually leave mine as is. Now select the "Settings" tab.
These are the settings I suggest for this tab, they are great for making your file hard to remove. If you need to control a computer of yours for a very long time, these are the perfect settings for you:
Spoiler (Click to View)
![[Image: 7b32042d78b9532d2580d7b3dc8a5a94.gif]](https://i.gyazo.com/7b32042d78b9532d2580d7b3dc8a5a94.gif)
After selecting these, you can move onto the "Assembly" tab. The only thing I recommend doing here is to spam "Randomize" a few times.
Spoiler (Click to View)
![[Image: b77ea97df0bf0fa75f070795aff49524.gif]](https://i.gyazo.com/b77ea97df0bf0fa75f070795aff49524.gif)
The final tab is the "Build" tab itself. This is our final stop for making a FUD crypt.
Select these settings:
Spoiler (Click to View)
![[Image: d42f8d520c7d85be9d16748caa2c7838.gif]](https://i.gyazo.com/d42f8d520c7d85be9d16748caa2c7838.gif)
Once you have done so, click "Crypt Payload" and name your new crypted stub. It will now create your file, and if it works properly, you will get a pop up like this:
Spoiler (Click to View)
![[Image: e2e7fe048515a09624fc10e692362fa6.png]](https://i.gyazo.com/e2e7fe048515a09624fc10e692362fa6.png)
Now, head over to the scanner found within Dragon Crypter and scan your file. You can also use any scanning site that does not distribute samples.
Spoiler (Click to View)
![[Image: d145a926e795c70a545ee202881bdb38.png]](https://i.gyazo.com/d145a926e795c70a545ee202881bdb38.png)
Once you have scanned it and have seen that it is FUD, you are ready to send your file to your computers that you need to control!
I hope this tutorial helped some of you understand how to setup Babylon RAT! If you have any questions, or comments on the thread, feel free to leave them below!
* - Business - May 15, 2015
(May 15, 2015 10:06 AM)Gyo Wrote: You did an amazing job. This setup tutorial is really good Business. Looking forward to see the rest.
Thanks for the kind words! I hope this helps everyone.
* - Comfycoma - May 15, 2015
An amazing user and contributor of the forums. Keep it up man! High-quality tutorial.
* - Business - May 15, 2015
Thanks for the kind words! If you have any questions let me know!
* - ROFL OMG - May 16, 2015
wow really impressed by the time and effort put into this entire guide. Thank you.
* - SIM-2212192 - May 17, 2015
Nicley done! I bet it took hours to make this, stay HQ OP! :)
I see tons of people asking how to set up a specific rat all the time, I guess this is another one of the to-do list haha!
* - haluk - May 17, 2015
Nice job business i appreciate so much. I will purchase mine very soon and will need your help spreading
* - Business - May 17, 2015
Glad that everyone finds this tutorial useful! :D
We are doing a big Babylon RAT + Dragon Crypter + RAT Lesson + Cash giveaway right now!
Check my signature for the thread!
* - smaxzax - May 17, 2015
How can i change the exe icon and keeping it FUD?? any easy way?
EDIT Figured it out . Great crypter!!! 100% FUD!!
* - Business - May 17, 2015
(May 17, 2015 11:04 AM)smaxzax Wrote: How can i change the exe icon and keeping it FUD?? any easy way?
EDIT Figured it out . Great crypter!!! 100% FUD!!
Thanks for the vouch! Let me know if you need any help!
* - xchg - May 17, 2015
Fantastic job business. You know, I see you a lot on this forum helping out and posting great tutorials, and I would just like to say, I'm super grateful.