+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] RAT in .Dll inject (/showthread.php?tid=6168902)
RAT in .Dll inject - odesey - Aug 20, 2021
Hi all.
Who is familiar with such a problem and can help me?
I have a self-written RAT.dll, on github I found dllinjector.c / .exe
How can I make one program out of these two programs so that when I start my RAT.dll is automatically added to kernel32.dll?
This can be done?
RE: RAT in .Dll inject - SIM-5063966 - Aug 20, 2021
Hi!
You can "host" your rat.dll on discord, upload it in a conv. with a friend / bot and copy the direct download link. Edit your dllinjector.c and make it download the file from your direct link, then inject the dll into kernel. I don't know if you can somehow merge the dll with the exe, but atleast you can download it into appdata/temp (locations that don't require administrator privileges) and then inject it.
RE: RAT in .Dll inject - rekted - Aug 20, 2021
why you can't just use RunPE? or inject dll to some legit process, maybe discord.exe?
RE: RAT in .Dll inject - Sajuuk - Aug 20, 2021
(Aug 20, 2021 03:54 AM)WtfIsThis Wrote: Hi!
You can "host" your rat.dll on discord, upload it in a conv. with a friend / bot and copy the direct download link. Edit your dllinjector.c and make it download the file from your direct link, then inject the dll into kernel. I don't know if you can somehow merge the dll with the exe, but atleast you can download it into appdata/temp (locations that don't require administrator privileges) and then inject it.
Even if it's a couple kilobytes, that network activity will likely be seen as suspicious by every semi-decent AV.
RE: RAT in .Dll inject - odesey - Aug 20, 2021
I want my malware code to be automatically added to kernel32.dll when I run my rat.exe
RE: RAT in .Dll inject - SIM-5063966 - Aug 20, 2021
(Aug 20, 2021 10:54 AM)Sajuuk Wrote: Even if it's a couple kilobytes, that network activity will likely be seen as suspicious by every semi-decent AV.
I don't really know, there are a lot of FUD droppers.
RE: RAT in .Dll inject - Sajuuk - Aug 20, 2021
(Aug 20, 2021 11:31 AM)WtfIsThis Wrote: I don't really know, there are a lot of FUD droppers.
Well, I guess try it. If it works, stick with it.