Private Crypter - Unique Private Stubs ◆ 🏆 Earn HF Awards through Goals ◆ Spoof Call and Spoof SMS set any caller ◆ [#1] PURE RAT v4 // BEST HVNC RAT ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Malware and Viruses › Hiding viruses

New Reply 

Hiding viruses
AceHardware
AceHardware Offline
[user@HF:]
*
Registered
Posts:
194
Threads:
31
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 11, 2017 05:43 PM
anyway I can make an exe file less likely to be detected by anti viruses. If you have any methods please post them down below.
Beladonis
Beladonis Offline
????
***
HF Ub3r
Posts:
1,688
Threads:
58
Credibility:
000
Popularity:
1,376
βytes:
β 0
Game XP:
229,571
Dec 11, 2017 06:40 PM
Just buy a crypter or look for free crypting services.
Avoxium
Avoxium Offline
[n00b@HF:]
*
Registered
Posts:
32
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 11, 2017 06:43 PM
Obfuscating your source and changing your programs signature by using crypting methods swill do this for you
AceHardware
AceHardware Offline
[user@HF:]
*
Registered
Posts:
194
Threads:
31
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 11, 2017 06:51 PM
Thanks for the responses mates :D
Nksmith66
Nksmith66 Offline
[n00b@HF:]
*
Registered
Posts:
29
Threads:
1
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 22, 2017 08:52 AM
go to marketplace section, buy a cryptor.
RandomDued
RandomDued Offline
[user@HF:]
*
Registered
Posts:
101
Threads:
9
Credibility:
600
Popularity:
12
βytes:
β 0
Game XP:
0
Dec 31, 2017 08:57 AM
Yeah, Just buy a crypter from the marketplace
_Pr0xy
_Pr0xy Offline
[user@HF:]
*
Registered
Posts:
131
Threads:
6
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 31, 2017 12:27 PM
If you want your payload to be undetected during runtime, I suggest encrypting the payload section of your code and then adding a new section that decrypts it dynamically when it is ran. This will stop the antivirus detecting any well known API calls that are used commonly by malware. In that encrypted payload you can use LoadLibrary to dynamically import DLL's and GetProcAddress in order to get the functions you need. This is sort of what a crypter does, except for free. You can also add junk code that does nothing, so that it slows down reverse engineering attempts.
jayexclusive
jayexclusive Offline
[n00b@HF:]
*
HF l33t
Posts:
13
Threads:
0
Credibility:
000
Popularity:
-1
βytes:
β 0
Game XP:
0
Jul 11, 2018 03:48 PM
how about spamming an exe direct, which will be better zip vs rar vs ace(how can you execute to ace)
PerfectStorm
PerfectStorm Offline
[closed@HF:]
Posts:
17,379
Threads:
69
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
6,953
Jul 11, 2018 03:50 PM (This post was last modified: Jul 11, 2018 03:51 PM by PerfectStorm.)
Doc exploit for Microsoft word :) maybe

Crypter to hide the detection
B0Trun
B0Trun Offline
Bots rule
***
HF Ub3r
Posts:
1,871
Threads:
30
Credibility:
1701
Popularity:
1,456
βytes:
β 0
Game XP:
1
Jul 11, 2018 03:56 PM
First your file must be 99% FUD , so you can hide it from any AV
jayexclusive
jayexclusive Offline
[n00b@HF:]
*
HF l33t
Posts:
13
Threads:
0
Credibility:
000
Popularity:
-1
βytes:
β 0
Game XP:
0
Jul 11, 2018 04:06 PM
must i use an xploit to change my exe to ace or are there other ways?
PerfectStorm
PerfectStorm Offline
[closed@HF:]
Posts:
17,379
Threads:
69
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
6,953
Jul 11, 2018 04:09 PM
(Jul 11, 2018 04:06 PM)jayexclusive Wrote:  must i use an xploit to change my exe to ace or are there other ways?

to what, ace?
jayexclusive
jayexclusive Offline
[n00b@HF:]
*
HF l33t
Posts:
13
Threads:
0
Credibility:
000
Popularity:
-1
βytes:
β 0
Game XP:
0
Jul 11, 2018 04:14 PM
(Jul 11, 2018 04:09 PM)PerfectStorm Wrote:  to what, ace?

yea "ace"
PerfectStorm
PerfectStorm Offline
[closed@HF:]
Posts:
17,379
Threads:
69
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
6,953
Jul 11, 2018 04:16 PM
(Jul 11, 2018 04:14 PM)jayexclusive Wrote:  yea "ace"

Da fuq is "Ace" 😅
Sparkling Jack
Sparkling Jack Offline
[n00b@HF:]
*
Registered
Posts:
63
Threads:
10
Credibility:
000
Popularity:
0
βytes:
β 12
Game XP:
0
Jul 11, 2018 05:11 PM
File pumping would be a good way for some AVs.
And if you want you exe to be undetectable to static test, you have to encrypt all strings and decrypt them in runtime.(you can use several crypto algorithms)
And use all functions with LoadLibrary and GetProcAddress. This is essential part of crypting your malware.
And you can use LoadPE or RunPE to hide your process.
But all these are troublesome and needs a lot of effort.
I suggest you to use Crypter though lol
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by CausticLasagneApr 1, 2024 01:39 PM 13 538 Apr 1, 2024 01:39 PM
Last Post: SIM-5507985
by todor100Sep 28, 2018 11:56 PM 9 433 Sep 28, 2018 11:56 PM
Last Post: shivam1234564