Hack Forums
Paying $10 Paypal for Crypter/RAT Assistance - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Paying $10 Paypal for Crypter/RAT Assistance (/showthread.php?tid=5881403)



Paying $10 Paypal for Crypter/RAT Assistance - Fire_Star - Sep 4, 2018

Hello,

i would pay anyone $10, if u could help me resolve my issue (reputed members only). I already have a crypter and its working fine. But the problem is avast behaviour shield is detecting my crypted stub i guess at the point when the server is meant to connect to the client.

I have tried NJRat and Quasar and i checked records for my DNS and IP everything is clean. i dont know wats the problem.

I have literally tried everything (Different settings, etc) but no luck and i am to my wits end.

If anyone could help me over TV i would really appreciate it.

My Skype is fire_star15

Thanx and Regards.


RE: Paying $10 Paypal for Crypter/RAT Assistance - kinginondexx - Sep 4, 2018

Ur crypters broke then it's not fud


RE: Paying $10 Paypal for Crypter/RAT Assistance - Cthulhu1 - Sep 4, 2018

(Sep 4, 2018 12:08 PM)kinginondexx Wrote:  Ur crypters broke then it's not fud

just because a crypter isnt FUD doesnt mean its broken. lol


RE: Paying $10 Paypal for Crypter/RAT Assistance - Fire_Star - Sep 5, 2018

The Crypter is FUD, I have done some tests and come to the conclusion that Avast Behavior Shield is detecting it a point of injection (i guess so), i have tried self injection and injecting into svchost, vbc, etc still the detection occurs and i have tried it with Native Rats as well.


RE: Paying $10 Paypal for Crypter/RAT Assistance - VisualSoft - Sep 5, 2018

(Sep 5, 2018 04:08 AM)Fire_Star Wrote:  The Crypter is FUD, I have done some tests and come to the conclusion that Avast Behavior Shield is detecting it a point of injection (i guess so), i have tried self injection and injecting into svchost, vbc, etc still the detection occurs and i have tried it with Native Rats as well.

This is called Runtime Detection.


RE: Paying $10 Paypal for Crypter/RAT Assistance - Fire_Star - Sep 5, 2018

(Sep 5, 2018 04:13 AM)VisualSoft Wrote:  This is called Runtime Detection.

Its showing clean on run4me.net

anyway to bypass it?


RE: Paying $10 Paypal for Crypter/RAT Assistance - VisualSoft - Sep 5, 2018

(Sep 5, 2018 04:15 AM)Fire_Star Wrote:  Its showing clean on run4me.net

anyway to bypass it?

thats only scantime result and not runtime.
When a Crypted file gets detected after running it, Its called Runtime detection.
You need to change your crypter is only Option.


RE: Paying $10 Paypal for Crypter/RAT Assistance - Fire_Star - Sep 7, 2018

Issue has been resolved. Please Delete this Thread.