[DeepHack21]

Hi, When I have a client I can do everything else see his webcam look at his files etc but when I try to remote desktop or steal passwords it says I cannot. Only works when his WD is off I have crypted the file and everything its a bat file not exe which is way more under the radar than an exe. I need help making this work. Maybe I put code in the bat file to turn off windows defender? Idk but I have good code in there already like auto start up and adding to exclusions folder when they run as admin. Please help.

[DramaKing]

Hi, When I have a client I can do everything else see his webcam look at his files etc but when I try to remote desktop or steal passwords it says I cannot. Only works when his WD is off I have crypted the file and everything its a bat file not exe which is way more under the radar than an exe. I need help making this work. Maybe I put code in the bat file to turn off windows defender? Idk but I have good code in there already like auto start up and adding to exclusions folder when they run as admin. Please help.

My first assumption was AV. WD is blocking the DLLs. If you have admin, you can disable realtime monitoring, but that will trigger an alert.

I don't want to start an argument, but I'd disagree about .bat files being less suspicious or detectable than .exe.

[DeepHack21]

Okay perfect yeah I just need remote desktop to work :(

[DramaKing]

Recompile the asyncrat project with latest visual studio and nuget packages , possibly refactor it too.

I’ll add DLL support soon.

---

Also I don’t think the password recovery will work anyways it’s so old. Atleast with chrome and some software cuz they patched it.

Password recovery might still work. It's the cookies that have the strong encryption updates.

[DeepHack21]

If u guys can help me that would be great

[DramaKing]

To summarize it's the unencrypted DLLs that are being detected. Either disable realtime monitoring with Set-MpPreference or obfuscate the DLL source code and recompile until the file is no longer detected. Then try it and see if it bypasses behavioral detection.

[katzadmin]

password recovery probably still can work but cookies already patched app bound encryption

[DramaKing]

password recovery probably still can work but cookies already patched app bound encryption

Whenever the RAT needs to load a DLL, it cannot because of antivirus.

[MrHudson185]

password recovery works for edge in latest windows 10 with defender disabled

[DeepHack21]

yeah no shit when WD is disabled both of them work idk how to make it work without disabling windows defener its fine my boy m0hx will fix it :)

[cipher2020]

Does anyone have the async rat modified with the WD exclusion and av removal dlls?

[Packages_33]

comments are the IQ level of the forum, actually the functionalities all work, all you have to do is obfuscate the dll

[shadow2511]

hello im shadow nice

[alexvenutelli7]

Hello guys, I am also very interested.

[OpalCanidae]

Hello guys, I am also very interested.

You need help setting up a rat? or are offering to set one up.