Hack Forums
Xworm Encryption Problem - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Xworm Encryption Problem (/showthread.php?tid=6289803)



Xworm Encryption Problem - Phantom_Services - Jan 17, 2025

Hey, currently writing a Crypter and i am having Problems with Xworm.

Loading and running works, but when i run the recovery function it crashs.

I noticed that the exe is x32 but the process runs as x64. If you know whats wrong let me know. also tried runpe for .net x32 but didnt worked.

I also tried injecting my loader with donut into a process and then loading it but didnt worked.
Used Assembly.Load() after amsi patch etc, all runs but crashs when i run recovery x64 and x32...


Thanks for your help.


RE: Xworm Encryption Problem - fscammers - Jan 18, 2025

which crypter do you use?


RE: Xworm Encryption Problem - Py_Dev - Jan 18, 2025

Assembly.Load() might have an issue identifying xworms entry point. Hope this helps :)


RE: Xworm Encryption Problem - Horus_Protector - Jan 18, 2025

This method only works for Windows Defender.


RE: Xworm Encryption Problem - Phantom_Services - Jan 19, 2025

(Jan 18, 2025 12:48 PM)Py_Dev Wrote:  Assembly.Load() might have an issue identifying xworms entry point. Hope this helps :)

No, it works and xworm connects.

But once i run the recovery option it crashs...


RE: Xworm Encryption Problem - StuntD - Mar 12, 2025

is there any Rat out there that is much better than xworm ?