+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: how to hide malware from windows ??? (/showthread.php?tid=6172177)
how to hide malware from windows ??? - Twisted-Spider - Sep 11, 2021
i recently created a ransomware and was scratching my head all day on how to hide it any ideas or suggestions ??
RE: how to hide malware from windows ??? - Terry A. Davis - Sep 11, 2021
Take a step back, look at what you're doing, you're doing something common, you've likely followed a simple play by play tutorial.
Look at how you could hook explorer to bypass certain functions, look at how you could disable anti-virus engines, look at things it's detecting, reduce the import table, load libraries and functions dynamically instead of statically.
There is plenty you can do, and if you created a "ransomware" like you said, then you should understand enough to know what I am saying.
RE: how to hide malware from windows ??? - Twisted-Spider - Sep 12, 2021
(Sep 11, 2021 03:30 PM)Depressed Wrote: Take a step back, look at what you're doing, you're doing something common, you've likely followed a simple play by play tutorial.
Look at how you could hook explorer to bypass certain functions, look at how you could disable anti-virus engines, look at things it's detecting, reduce the import table, load libraries and functions dynamically instead of statically.
There is plenty you can do, and if you created a "ransomware" like you said, then you should understand enough to know what I am saying.
I mean trying to make the ransomware work without admin privilege's so anti-virus engines I tried to load libraries and functions dynamically but that didn't work I also tried to crypt the payload to XOR and then decrypt it while executing that didn't help i also tried to hide it in the new venerability CVE-2021-40444. any other ideas ???
i forgot to mention I am using .net
RE: how to hide malware from windows ??? - Terry A. Davis - Sep 13, 2021
Why not use a UAC bypass and then cripple any anti-virus, look at how they handle exclusions and either inject your own as an exclusion, uninstall it, hook things in it that check to see if it's been tampered with?
XOR is quite common and the algorithm for it is easy to find in a file, so yet again, common thing, very easy to detect.
Also, that's not a 0day so odds are most anti-virus vendors will detect it.
I'm not going to hand hold you in this, this is all on you buddy.
RE: how to hide malware from windows ??? - spongebob - Sep 13, 2021
Ransomwares' discussion is not allowed here. Please read Help Docs