Feb 20, 2019 07:28 AM
(This post was last modified: Apr 11, 2019 08:03 AM by SIM-3132187.)
Information about my service :
This crypting service is a modular service. It means, it's possible to add custom settings in the stub (check out 'custom service' for futher informations). The stub is written in C++, it is fully unicode and all the APIs are called from a manualy mapped ntdll. The default injection is a variant of process hollowing, and works with .NET and native applications.
After payment, I manualy try your crypted file to make sure there's no problem and it is FUD. Also, a scantime result is provided with the crypt.
Features :
• Process Hollowing varient assuring runtime evasion.
• Unique and adaptive startup method that bypass proactives.
• Anti virtual machine.
• Small stub size (~70-90kb).
• Full unicode support.
• Custom services.
Custom Service :
The crypted output is provided w/e a startup and a ring3 unhook engine.
However, it's possible to add custom functions to the stub (e.g persistence, downloader, ...).
The price indeed is not the same, the cost increase is my own decision by what you ask for.
Plans :
• $80 per stub
• $240 for 4 stubs
• You're the only responsible of the detection(s) on your stub, unless it is my fault and it is detected under 24 hours, I will update the stub for free.
Contact me :
•To purchase or any other business regarding this service, contact me at: [email protected]
•You can also directly create a contract : Purchase
Unicode video proof (Chinese VM) :
• https://vimeo.com/329825338
Runtimes video (Internet ON & reboot) :
Spoiler (Click to View)
This crypting service is a modular service. It means, it's possible to add custom settings in the stub (check out 'custom service' for futher informations). The stub is written in C++, it is fully unicode and all the APIs are called from a manualy mapped ntdll. The default injection is a variant of process hollowing, and works with .NET and native applications.
After payment, I manualy try your crypted file to make sure there's no problem and it is FUD. Also, a scantime result is provided with the crypt.
Features :
• Process Hollowing varient assuring runtime evasion.
• Unique and adaptive startup method that bypass proactives.
• Anti virtual machine.
• Small stub size (~70-90kb).
• Full unicode support.
• Custom services.
Custom Service :
The crypted output is provided w/e a startup and a ring3 unhook engine.
However, it's possible to add custom functions to the stub (e.g persistence, downloader, ...).
The price indeed is not the same, the cost increase is my own decision by what you ask for.
Plans :
• $80 per stub
• $240 for 4 stubs
• You're the only responsible of the detection(s) on your stub, unless it is my fault and it is detected under 24 hours, I will update the stub for free.
Contact me :
•To purchase or any other business regarding this service, contact me at: [email protected]
•You can also directly create a contract : Purchase
Unicode video proof (Chinese VM) :
• https://vimeo.com/329825338
Runtimes video (Internet ON & reboot) :
Spoiler (Click to View)
![[Image: zNHhPfZ.gif]](https://i.ipixls.net/zNHhPfZ.gif)
