+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] Extension Spoofer & Binder & Scantime Crypter & Icon Chaner (/showthread.php?tid=5010371)
Extension Spoofer & Binder & Scantime Crypter & Icon Chaner - xeinebiu - Oct 4, 2015
Hi Guys
I am sharing a project with you which i have used many times with my RAT Viruses.
It is able to crypt your Virus so it will make it Totally Fud ( S C A N T I M E ! )
- How Does it Works ?
- Select File you want to Hide.
- Reading all bytes of Selected File
- Converting them to Base64 String
- Encrypting Base64 String with Password
- Writing Encrypted String to Stub
- Reading all bytes of Selected File
- Select The Icon
- Write Extension
- Click Start Button
- Depending of Extension you have wroten , you must select a file with that extension.
- File Selected , will be crypted same as your First File.
- It will be writed in stub .
- Depending of Extension you have wroten , you must select a file with that extension.
- Select File you want to Hide.
- Stub
- Decrypt String to Original State
- Convert Base64 String to Byte Array
- Writing Bytes to Hard Drive with their original filenames
- Executing your file and second file
- Example : virus.exe & image.jpg
- Example : virus.exe & image.jpg
- Stub.Exit
- Stub Extension is : SCR not EXE ;)
- Decrypt String to Original State
Here it is an Preview of Program.
[img]http://s15.postimg.org/c08yplguj/Capture.png[/img]
Result
[img]http://s3.postimg.org/r6citf4tf/Capture.png[/img]
V I R U S T O T A L
Download : MediaFire
Password : 1
* - Vector.A+ - Oct 4, 2015
Dont use virustotal it kills the udness
* - xeinebiu - Oct 4, 2015
(Oct 4, 2015 09:25 AM)max_steel Wrote: Dont use virustotal it kills the udness
i KNOW BRO ;
thanks anyway ;)
* - N3w8i3H4ck3r - Oct 4, 2015
Erm.... How to i get the rar password?
* - testkroket - Oct 4, 2015
Hahaha owned by himself....
* - xeinebiu - Oct 10, 2015
(Oct 4, 2015 03:37 PM)testkroket Wrote: Hahaha owned by himself....
What do u mean owned by himself ? I shared it with u ...
(Oct 4, 2015 01:02 PM)N3w8i3H4ck3r Wrote: Erm.... How to i get the rar password?
Password is : 1
* - Lysergide - Oct 11, 2015
Thanks for the source!
But I still have yet to understand why you scanned on VirusTotal
* - xeinebiu - Oct 12, 2015
(Oct 11, 2015 12:36 AM)Lysergide Wrote: Thanks for the source!
But I still have yet to understand why you scanned on VirusTotal
Because i think there is no reason to mark this as virus ... Just my opinion ;) i know i should se refud.me :)
* - Sutzi - Oct 12, 2015
Well done xeine, very impressive work sir.
* - baronbh - Oct 29, 2015
Amazing work, already test it and works really great!!!!!
* - Adderall - Oct 30, 2015
Looks like a nice project, but please never use the blue "Hi guys" color again it hurts my eyes.
* - LilDurk - Jan 8, 2016
Lol scanning on VirusTotal,
you dun goofd yourself bro.
* - bluntly - Jan 9, 2016
It's sad you uploaded it to virustotal, but by replacing the encryption with another one and by changing the code i think it'll be FUD again :)! Very nice idea! :D You "simply" added the feature of not being recognized when using a extension spoofer, well done :)!
* - iLogic™ - Jan 11, 2016
Never never never scan on VT. It is crypters killer (user razorscanner, anonscan, majyx insted). Btw nice work.
* - xeinebiu - Jan 12, 2016
(Jan 11, 2016 03:21 AM)The Composer Wrote: Never never never scan on VT. It is crypters killer (user razorscanner, anonscan, majyx insted). Btw nice work.
The code is very clean and i know about it bro , i know it too that it has no reason to mark this as virus because i know what i have wroten in that program code .
BTW THANKS