+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Encrypting / Obfuscating .vbs scripts (/showthread.php?tid=5587873)
Encrypting / Obfuscating .vbs scripts - A4A4ANDY - Mar 30, 2017
Hey,
I recently downloaded a worm that creates a .vbs client, now it is detected by 6/35 anti virus, does anyone know techniques on how I can make it harder for AV to detect it?
Thanks for your time!
* - SIM-3432714 - Mar 30, 2017
If you want PM me, i can crypt it.
* - Jar Jar Binks - Mar 30, 2017
Interesting, could you pm me the source?
* - A4A4ANDY - Mar 30, 2017
(Mar 30, 2017 07:13 AM)Jar Jar Binks Wrote: Interesting, could you pm me the source?
I'm sorry, unable to PM yet! it was the worm used in this thread: /showthread.php?tid=5427019
edit: I am able to PM and have done so to you!
* - Necropod - Mar 30, 2017
(Mar 30, 2017 06:28 AM)A4A4ANDY Wrote: Hey,
I recently downloaded a worm that creates a .vbs client, now it is detected by 6/35 anti virus, does anyone know techniques on how I can make it harder for AV to detect it?
Thanks for your time!
maybe change icon
* - SIM-3432714 - Mar 30, 2017
(Mar 30, 2017 11:17 AM)Necropod Wrote: maybe change icon
-______-
really ?
* - Fortified Design - Mar 30, 2017
(Mar 30, 2017 11:23 AM)potkan Wrote: -______-
really ?
Made me laugh but from what I understand you have to change methods and a lot of other things.
* - Codefuser - Mar 30, 2017
(Mar 30, 2017 11:24 AM)Fortified Design Wrote: Made me laugh but from what I understand you have to change methods and a lot of other things.
This is a VBS file and not a PE file. There are no icons/resources to be changed.
* - Jar Jar Binks - Mar 30, 2017
Oh as for methods OP. You can download software like
>>caution dl link ahead<<
this and others to wrap it into an exe and then crypt that exe
This software should bring the detetion ration down to 1:54 uncrypted
EDIT:
I tested it out myself vbs to exe brings it down to 2:54
And obvs if you crypt it with a good crypter she'll be fud
* - A4A4ANDY - Mar 30, 2017
(Mar 30, 2017 02:56 PM)Jar Jar Binks Wrote: Oh as for methods OP. You can download software like
>>caution dl link ahead<<
this and others to wrap it into an exe and then crypt that exe
This software should bring the detetion ration down to 1:54 uncrypted
EDIT:
I tested it out myself vbs to exe brings it down to 2:54
And obvs if you crypt it with a good crypter she'll be fud
Thanks! I'll take a look at it!