[OLYMPO]

---

HURRY UP TO BUY:
https://t.me/OlympLoader - more information and proofs of work
https://t.me/OlympLoader_Support - to buy, questions or help

---

TEXT VERSION:
We are creating the first FUD (Fully Undetectable) payload delivery solution on the market.

You may have heard of other similar projects like Amadey and SmokeLoader, but those are just parodies of a proper loader. They use aggressive techniques like RunPE/LoadPE, which destroy the loader’s survivability. As a result, once a dirty stealer is loaded, the antivirus kills the loader process — and the connection to the bot is lost forever.

The OLYMP Team has solved this problem in the OLYMP Loader product — now your loader and your online presence are a priority, so you can always upload a payload to your bot without fear of losing it!

Why is OLYMP truly a FUD solution?
— We implemented stealthy, signatureless communication with the C2 server. No GET or POST arguments — all requests are completely empty and carry no payload, which eliminates runtime detections.
— A smart ping system: the bot does not maintain a constant connection — it connects briefly to check for active tasks, executes them if present, then goes into a one-minute delay — during which no connection to the server exists at all.
— The loader weighs only 3 KB, written entirely in shellcode with zero dependencies, making it easy to crypt and move around while avoiding any signatures.
— File download and execution is done via external processes and services, keeping the loader process itself completely clean.
— Persistence is randomized and implemented via a 0/72 FUD PowerShell self-extracting dropper — so your loader will always remain in the system. Even if Defender deletes it, the dropper will restore it.
— Connection to the C2 via proxy, so that each client has a unique server IP.
— Always unique builds — morpher inside the builder and generation of unique data.

Also we have:
— The best web panel with our self-hosted payment system without fees.
— Protection from dead machines and LoaderInsight services designed to prevent payload leaks to VirusTotal.

— Our own payloads for stealing browser data, Telegram sessions and other information from the bot (payloads are FREE)


Attention! Functions can be added, removed, or changed as loader rewritten.

Try OLYMP and see the power of the product yourself:

Basic build (totally FUD, 0\72 VirusTotal, full Defender bypass, x32) — 49$, long FUD, moneyback\recrypt if it will detected by Windows Defender in a first day.
Shellcode build (only for professionals!, 3 kilobytes, x32) — 42$ — same as "Basic" codebase, but without crypt. Binary file. Don't buy it if you don't know what is "shellcode".
Monthly subscription (payloads, panel, support and etc) — 40$.

Attention! Prices are subject to change!

---

WHAT YOU NEED FOR WORK? / INSTRUCTIONS

You need Linux server for setting up proxy. Proxy needed for avoiding AV detections by IP, so each customer will have custom IP for C2.
After account activation, go to "Proxy" tab and read instructions. Download proxy with "Download" button and install it to your server. Then set up your proxy IP address in "Proxy" tab, press "Set", and go to "Builder", now you can request build. Select build and press "Create", then pay for the build.

Done! You can upload build to a VirusTotal or check it in your machine for detections, you will see 0\72, you're amazing! ^^

If you have problems with setting up, dm support: @OlympLoader_Support

STOP WORKING WITH DETECTED AND DIRTY SOLUTIONS! WE NOT AFRAID VIRUSTOTAL!
START WORKING WITH OLYMP!

Start Contract

[SIM-5613027]

Instead of runpe/loadpe what does your loader use runtime

[OLYMPO]

Instead of runpe/loadpe what does your loader use runtime

Hi! Thanks for your question. We’ve implemented a dropper method that supports all file extensions (.exe, .pdf, .html, .htm, .ps1, .bat and etc), along with Rundll32 for 32-bit DLLs. It’s important to understand that this isn’t done directly through the loader process. Instead, it’s executed via PowerShell, which is generated on the proxy side through PowerShell morphing code (always unique PowerShell loader). Before this, the loader uses cmd.exe with a timeout, and right before the PowerShell is executed, the loader completely exits and disappears from the process list (it leaves behind another cmd.exe instance that will restart it). As a result, PowerShell runs from a non-existent parent process.

This fully "cleans" the loader’s process, giving us a 0/72 detection rate and no Sabsik/Wacatac or MITRE tags.
(Every day I think about new ways of techniques loading that would not give detection, so maybe in a week we will have a completely different code.)

Our loader takes a different approach — your online presence is our top priority.
Amadey, for example, used LoadPE/RunPE to hide the payload and tried to protect it from antivirus detection. But by doing so, they put your online presence at risk — if antivirus software detected the payload, it would remove both the loader and the payload. So, you will lose a bot forever.

With our loader, your online presence comes first. The antivirus might remove your payload if it’s low quality, but the connection with your bot will always remain active, allowing you to re-upload another payload. This ensures 100% bots online, and we guarantee it.

[SIM-5613027]

Hi! Thanks for your question. We’ve implemented a dropper method that supports all file extensions (.exe, .pdf, .html, .htm, .ps1, .bat and etc), along with Rundll32 for 32-bit DLLs. It’s important to understand that this isn’t done directly through the loader process. Instead, it’s executed via PowerShell, which is generated on the proxy side through PowerShell morphing code (always unique PowerShell loader). Before this, the loader uses cmd.exe with a timeout, and right before the PowerShell is executed, the loader completely exits and disappears from the process list (it leaves behind another cmd.exe instance that will restart it). As a result, PowerShell runs from a non-existent parent process.

This fully "cleans" the loader’s process, giving us a 0/72 detection rate and no Sabsik/Wacatac or MITRE tags.
(Every day I think about new ways of techniques loading that would not give detection, so maybe in a week we will have a completely different code.)

Our loader takes a different approach — your online presence is our top priority.
Amadey, for example, used LoadPE/RunPE to hide the payload and tried to protect it from antivirus detection. But by doing so, they put your online presence at risk — if antivirus software detected the payload, it would remove both the loader and the payload. So, you will lose a bot forever.

With our loader, your online presence comes first. The antivirus might remove your payload if it’s low quality, but the connection with your bot will always remain active, allowing you to re-upload another payload. This ensures 100% bots online, and we guarantee it.

Ah ok understood. Just to check do you patch AMSI for the PowerShell execution, even though it runs via a spawned cmd.exe child process

[OLYMPO]

Ah ok understood. Just to check do you patch AMSI for the PowerShell execution, even though it runs via a spawned cmd.exe child process

Nope, our loader don't trying access to another processes and apply any patches. Our priority is stealth and maximum legitimacy.
Our generated PowerShell is not detected by AMSI on its own, so there’s no need to worry about that. It's executed right trought -Command parameter in the powershell.exe, not from disk (-File).

We’ve tested the builds multiple times on clean Windows 10 and 11 systems with the latest Windows Defender updates and all features fully enabled (including sample submission), and everything okay. We also have 1 tester, our botnet online is 12 now (it's 100% from all online), and this build was leaked to VT a day ago, so he's still undetected (we also have some VT machines among bots, lol).

So, that's why we have such a low price now. We need traffic to our FUD builds to check online. But we are sure that you (and we) will not be disappointed in this.

---

We'll give a build to 3 people in exchange for a review!
https://t.me/OlympLoader_Support

[kopfnuss22]

Will there be a selfhost option anytime soon?

[OLYMPO]

Will there be a selfhost option anytime soon?

Hello! We don't giving our panel source code, but it also self-hosted, because you will use bridge\proxy to connect your bots to the our API, so traffic from our panel to your bots will going through your server and you can control it.

[woo097878781]

Can I host it myself?
Has anyone actually purchased it? Is it really FUD?

[OLYMPO]

Can I host it myself?
Has anyone actually purchased it? Is it really FUD?

Yes, it's really FUD, we have 200 online at now and 4 beta-testers that purchased it. We can work through guarantor and secure trade services, if you don't trust.

Guys, also we have STEALER functions now! Recently we added "Payloads" module with Telegram TDATA session stealer! So we have our payloads now.

[kopfnuss22]

What happens if you stop supporting and shut down your servers, like Jinx did? We'd have nothing left?

[Nenny]

Seems interesting gli my fried

[OLYMPO]

What happens if you stop supporting and shut down your servers, like Jinx did? We'd have nothing left?

Your bots will continue ping to YOUR server, but if our API will shutdown, yes, you can't make operations with bots. But it never happen.
We are going to work for a very long time and capture the market, we already have quite a lot of customers. We have very good security on our server, our own payment system (self-hosted) and expensive servers in Switzerland, we are ready for attacks and will be able to recover our API and panel quickly. In case of ban our servers, we will be able to quickly change the domain\server, and you will simply change the URL to our API on the side of YOUR proxy server, and work will be restored, your bots will be restored and everything will be ok.
Also we have restore function on the client-side, it's "Recovery URL'. If your proxy will baned, then client written in assembly language will send request to this URL to get actual proxy IP address, so you will never lose your online (becase of FUD + recovery functions + well-thought-out infrastructure).

All builds from the panel are going through morphing module and ping individual customer IP without signatures.

[DeathPenalty666]

So for 20$ i could give it a try before the official release or its 20$ + 20 for the nibrky fee? it look decent for 20buck i gt it on the field right away to test this out :D

[OLYMPO]

So for 20$ i could give it a try before the official release or its 20$ + 20 for the nibrky fee? it look decent for 20buck i gt it on the field right away to test this out :D

For now it's 10$ for registration (your registration will be active for month) and 10$ for FUD build.
Before 20.06.2025. After a month you need to pay monthly fee (without discounts, because beta-test expired), i can be about 50-60$. But your build will be actual. But you can make a rebuild.
I think you'll have time to earn more before the subscription expires, because you will have a good online, and you can load any payloads to your bots.

After 20.06.2025 prices will increase. For example, FUD build can have price 100$.

[DeathPenalty666]

For now it's 10$ for registration (your registration will be active for month) and 10$ for FUD build.
Before 20.06.2025. After a month you need to pay monthly fee (without discounts, because beta-test expired), i can be about 50-60$. But your build will be actual. But you can make a rebuild.
I think you'll have time to earn more before the subscription expires, because you will have a good online, and you can load any payloads to your bots.

After 20.06.2025 prices will increase. For example, FUD build can have price 100$.

Thanks you! I will kick some a$$ to have my money before the time!!! do you have a video walk around or a few more photos on how the payload working or its only a c2 loader? world love to see quicly how it look like :)