Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

LuminosityLink Crypting Guide - Using Luminosity's Ring3 Rootkit/Startup/Persistence

LuminosityLink is a highly advanced RAT that contains features such as a usermode ring3 rootkit, powerful persistence, silent startup, and amazing Anti-Malware/Bot Killer. However, crypting Luminosity while using all its great features can be a challenge. Therefore, I have created this tutorial to assist users.

[Image: PRyXA1i.png]


What Crypters Work Best?
According to KFC Watermelon himself, any crypter which stub is coded in .NET and has self injection will work perfect with Luminosity and its features. He recommends AeonHack's RunPE, stating that the self injection on it works excellent with Luminosity and its rootkit.

If you are going to purchase a crypter, it is highly recommended that you PM the seller first to ensure it works with Luminosity. Send him or her a link to this thread - it will be helpful to the seller as well.

Crypter Settings:
If your crypter meets the above specifications (.NET Crypter with self injection), disable all settings within your crypter (such as startup, persistence, mutex, etc) and just enable self injection, "Inject into self." That is all you need. You may then enable the startup/persistence/rootkit within Luminosity.

If your crypter does not meet the above specifications, meaning it is coded in another language (AutoIT, C++, etc), then you must disable the startup/installation/rootkit within Luminosity. You must then enable the startup option within your crypter. You should also enable ".NET Support" within your crypter, if it's an option.

Contact your Crypter Seller!
KFC Watermelon provides support for LuminosityLink. He does not provide support for crypters, as he does not make or sell them. You should contact the coder of your crypter, and/or the support, in order to get the appropriate settings and information.

In addition, you may post a reply to this thread to ask for help. If you have appropriate crypter settings, it would be greatly appreciated if you posted them here for others to see. Thank you!


Credits:
-KFC Watermelon (thread design and software)
-AeonHack (RunPE which was tested with LuminosityLink extensively)
-Me (creating thread, helping KFC test crypters)
Vouch,
byte is a very skilled person, knows his shit.
His crypter is very good, I would recommend checking that out.
Time to figure out how to use it with RazerCrypter :C

However VERY usefull guide thanks
EDIT: Well RazerCrypter is incompatible sadly. Also AeonHack's RunPE is source only, well I'm screw'd now ^^.
(Apr 30, 2015 07:57 PM)LegendaryFox Wrote:  Time to figure out how to use it with RazerCrypter :C

However VERY usefull guide thanks
EDIT: Well RazerCrypter is incompatible sadly. Also AeonHack's RunPE is source only, well I'm screw'd now ^^.

You can use my opensource crypter.
It uses aeonhacks runpe.
https://hackforums.net/showthread.php?tid=4801618
Lotta blood to let, peace to make, give a fuk about a check
Hello byte,
i would like to contribute to your thread by mentioning this -
Luminosity is a very size-dependent RAT. Now, im not 100% sure of this, so ignore this if im wrong, but what ive noticed is that if you make the crypted file too large, the Luminosity's stub will simply get corrupt and the RAT wont work. Now, sorry if thats already known or basic logic, just wanted to leave it there.
Also, reading from above if youre using a crypter that allows you to change icon/assembly (like cyberseal) you might notice that if your rat is not in the same size or close to that as the original, safe file, you will get alot of bary detections. Therefore, use a smaller file to copy assemlby from, some kb's to match the file size in a radius of 300kb and you should be fine!

Hope i helped someone.
(May 1, 2015 12:05 AM)h4tee Wrote:  Hello byte,
i would like to contribute to your thread by mentioning this -
Luminosity is a very size-dependent RAT. Now, im not 100% sure of this, so ignore this if im wrong, but what ive noticed is that if you make the crypted file too large, the Luminosity's stub will simply get corrupt and the RAT wont work. Now, sorry if thats already known or basic logic, just wanted to leave it there.
Also, reading from above if youre using a crypter that allows you to change icon/assembly (like cyberseal) you might notice that if your rat is not in the same size or close to that as the original, safe file, you will get alot of bary detections. Therefore, use a smaller file to copy assemlby from, some kb's to match the file size in a radius of 300kb and you should be fine!

Hope i helped someone.

This is incorrect information. The size of the output has nothing to do with wherever it will work or not.

I can't provide support regarding crypting Luminosity 9/10 of the times. I don't code a crypter. I'm not the support of your crypter.
Happy this works great with Abyss Protect! A lot of my customers are satisfied.
Does it work with cyberseal?
(May 2, 2015 07:56 AM)chinchedder Wrote:  Does it work with cyberseal?

Should work fine with CyberSeal, though I cannot personally recommend it as I have not used it.
(May 1, 2015 12:05 AM)h4tee Wrote:  Hello byte,
i would like to contribute to your thread by mentioning this -
Luminosity is a very size-dependent RAT. Now, im not 100% sure of this, so ignore this if im wrong, but what ive noticed is that if you make the crypted file too large, the Luminosity's stub will simply get corrupt and the RAT wont work. Now, sorry if thats already known or basic logic, just wanted to leave it there.
Also, reading from above if youre using a crypter that allows you to change icon/assembly (like cyberseal) you might notice that if your rat is not in the same size or close to that as the original, safe file, you will get alot of bary detections. Therefore, use a smaller file to copy assemlby from, some kb's to match the file size in a radius of 300kb and you should be fine!

Hope i helped someone.

That made me laugh so hard....
[Image: logo.gif]
(May 2, 2015 08:11 AM)KFC Watermelon Wrote:  Should work fine with CyberSeal, though I cannot personally recommend it as I have not used it.

Ah thanks, im about to get fileguardian or cyberseal, what do you recommend or what would you get?
(May 2, 2015 09:10 AM)chinchedder Wrote:  Ah thanks, im about to get fileguardian or cyberseal, what do you recommend or what would you get?

You can also test my free crypter
https://hackforums.net/showthread.php?tid=4803353
It's currently fud.
🤝
(May 2, 2015 09:10 AM)chinchedder Wrote:  Ah thanks, im about to get fileguardian or cyberseal, what do you recommend or what would you get?

File Guardian won't work with Luminosity's Rootkit/Installation/Persistence.
This thread needs to be updated. The Rootkit may now be used with native and AutoIT crypter. Only installation needs to be disabled.
Cryptex reborn works fine with your tool KFC. I will make tutorial how to make fud using LuminosityLink and Cryptex_Reborn


Possibly Related Threads...
Thread / Author Replies Views Last Post
by raspitoAug 17, 2024 07:31 AM 5 338 Aug 17, 2024 07:31 AM
Last Post: DramaKing
by Neik111Dec 23, 2023 06:41 PM 8 526 Dec 23, 2023 06:41 PM
Last Post: DramaKing
by SAABmasterFeb 14, 2021 03:35 AM 1 322 Feb 14, 2021 03:35 AM
Last Post: picpic