+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] Avoiding startup detections (/showthread.php?tid=5762932)
Avoiding startup detections - Jefferke - Dec 4, 2017
Hey guys, I'm currently working on a rat, the detection rate is 0/36 when I scan it without putting the code in it to make itself add to startup.
But when I do add the code I get like 7 detections out of 36, how do you guys avoid getting these detections?
RE: Avoiding startup detections - 000HAT - Dec 4, 2017
Try obfuscating it or write it non-textbook.
RE: Avoiding startup detections - kevy42 - Dec 5, 2017
What type of startup is it?
RE: Avoiding startup detections - Gt403cyl - Dec 5, 2017
It's because you are calling for it to add to the registry.
The method name might be the reason for the detection....
RE: Avoiding startup detections - user38 - Dec 6, 2017
Since you do not disclose any info on how your application works it is hard to give an answer to this, but if you actually are writing directly into the registry without proper signing or elevation of rights, most AVs will take it as malware.
Is there a reason why you don't create a service instead?
RE: Avoiding startup detections - Meterpreter - Dec 6, 2017
Avoid registry editing and go more towards hidden services.