+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: Scantime-Runtime (/showthread.php?tid=6080899)
Scantime-Runtime - OwOuwuOwO - May 23, 2020
Hello, I've made a bot (client) in python that connects to the botnet (server). I included some antivm & antisandbox, then obfuscated with base64 execution and another layer with zipping, then packed into exe. I have scanned it on virustotal (stub is too big for nodistribute) and got a few detections from unknown antiviruses. My problem is, that the client 'dies' (I cant say it on 100%, I tested like on 3 devices) after 5-15 minutes of sucessful requests. Is it possible that antivirus deletes it after such long time?
RE: Scantime-Runtime - Sinistros - May 23, 2020
(May 23, 2020 02:18 AM)OwOuwuOwO Wrote: Hello, I've made a bot (client) in python that connects to the botnet (server). I included some antivm & antisandbox, then obfuscated with base64 execution and another layer with zipping, then packed into exe. I have scanned it on virustotal (stub is too big for nodistribute) and got a few detections from unknown antiviruses. My problem is, that the client 'dies' (I cant say it on 100%, I tested like on 3 devices) after 5-15 minutes of sucessful requests. Is it possible that antivirus deletes it after such long time?
Hello, never upload on VT, it distributes your files and all anti virus will detect your bot, it is possible try to scan it on non distribute scanner to find wich anti virus detect it.
RE: Scantime-Runtime - Chameleon - May 23, 2020
(May 23, 2020 02:18 AM)OwOuwuOwO Wrote: Hello, I've made a bot (client) in python that connects to the botnet (server). I included some antivm & antisandbox, then obfuscated with base64 execution and another layer with zipping, then packed into exe. I have scanned it on virustotal (stub is too big for nodistribute) and got a few detections from unknown antiviruses. My problem is, that the client 'dies' (I cant say it on 100%, I tested like on 3 devices) after 5-15 minutes of sucessful requests. Is it possible that antivirus deletes it after such long time?
I don't think a antivirus company would delete a sample but i am not sure.
RE: Scantime-Runtime - OwOuwuOwO - May 23, 2020
(May 23, 2020 04:11 AM)Sinistros Wrote: Hello, never upload on VT, it distributes your files and all anti virus will detect your bot, it is possible try to scan it on non distribute scanner to find wich anti virus detect it.
A few days ago connected device with ip identified as an 'Avast company s.r.o.' lmao, they suck
RE: Scantime-Runtime - Sinistros - May 23, 2020
(May 23, 2020 12:35 PM)OwOuwuOwO Wrote: A few days ago connected device with ip identified as an 'Avast company s.r.o.' lmao, they suck
He knows, you know, we know...