Hack Forums
CloudEye/DarkEye vs Broad vs Trillium - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: CloudEye/DarkEye vs Broad vs Trillium (/showthread.php?tid=6049348)



CloudEye/DarkEye vs Broad vs Trillium - Dafuq - Feb 14, 2020

If you use or have used any or all of these, a little info on which one is better and why would be appreciated. 🕵️

I am in the market to buy something that works irrespective of the RAT being used, however, I am currently testing with #. 🙃

Your thoughts? 🐱‍👤


RE: CloudEye/DarkEye vs Broad vs Trillium - SheSmokes - Feb 14, 2020

I've only tried DataPro and CyberSeal from this market, both which were good. The suggestion I will give though is this, # runtime detection rate is pretty bad.


RE: CloudEye/DarkEye vs Broad vs Trillium - Dafuq - Feb 14, 2020

(Feb 14, 2020 03:15 AM)SheSmokes Wrote:  I've only tried DataPro and CyberSeal from this market, both which were good. The suggestion I will give though is this, # runtime detection rate is pretty bad.

I know what you're saying. But I know for a fact that it is possible to bypass AVs if the crypter stub is FUD. This question is just to get people's thoughts on various options available. I am only considering the advance crypters now, since the basic ones didn't work for me. Thankfully, the owners were nice enough to issue a refund. 🙃


RE: CloudEye/DarkEye vs Broad vs Trillium - Dafuq - Feb 14, 2020

(Feb 14, 2020 11:30 AM)crypt4u Wrote:  Fast review
darkeye is well known crypter since years
but u cant judge its runtime
as they turn into memory downloader
somthing like what nayan cat send here on his great share
https://hackforums.net/showthread.php?tid=5872839&highlight=memory+downloader
what darkye do is download the main .bin from internet(with no drop on disk)
then directly map it on memory
from samples
they have 2 injection type
self injection( detected as runpe) if u use runpe detector
system process injection is cool with no runpe detect
to know its true runtime u must do dyncheck while internet is on
as if u do normal dynncheck(internet of) you do nothing as you only excute there downloader
that try get the main .bin from internet to map on memory
Prices are so expensive(greedy) with no new idia to push on market
## only repect those  coders  here   cyber coder and n0$f3ratu$ with there big knowlage
broad crypter i think is dead

Does DarkEye get the job done? It seems to be bypassing windows defender without any problem and even if the RAT is detected and removed, it comes back online after restart. 😲


RE: CloudEye/DarkEye vs Broad vs Trillium - FuzzyInteger - Feb 18, 2020

CloudEye (darkeye) with trusted loader (system process mapping), bypass almost everything. 🤯


RE: CloudEye/DarkEye vs Broad vs Trillium - smtsky1st - Apr 24, 2020

I have this hash identifier issue with my CloudEyE.

Anyone know how to rectify this? Or is anyone else experiencing the same?