+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Help to bybass Qihoo-360 Detection in Virustotal (/showthread.php?tid=5086582)
Help to bybass Qihoo-360 Detection in Virustotal - IAmBabyFinn - Dec 8, 2015
Hello
I am writing Realy simple code for spreading purpose. Its coded in C#
The only purpose of the code is to bybass virustotal.
If you wonder how i did it You can find it here :
hackforums(dot)net/showthread.php?tid=5040149&page=4
But theres a big fucking problem .
Antivirus called Qihoo Detectes Almoust everything
it has detected my download and other programs .
It finds my code : HEUR/QVM03.0.Malware.Gen
scan : virustotal(dot)com/et/file/f4dfbe7fced3e5069b99a3bf4c75d68dc9e93d80114f680ce6fa4c3bf476c90c/analysis/
My code is pretty simple
1. Looks if the running machine Could be VM
2. Uncrypts stub using BASE 64 and command called certutil
3. Runs My stub and Displays my fake program error
Basicaly What triggers that detection?
Heres My Code and some screenshots.
pastebin(dot)com/5QuVwv10
gyazo(dot)com/4b9c1d03bceae5074e82651407fcf2ef
Things i have tried :
Removing the anti virustotal code
Writing junk code (ALOT)
Tryng Other Icons or no icon
Building it in other Compiler Such as SharpDevelop
If you Could Help Me With this one I Would Be so Happy