Spoof Call and Spoof SMS set any caller ◆ Traffic service & campaign optimization ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Cheap KYC Verifications & Openups ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Blackhat • Red Team • Offensive Security Hacking Tools and Programs › My Crypter + Binder (Still Beta Need Help with Hexing Stubs)

New Reply 

My Crypter + Binder (Still Beta Need Help with Hexing Stubs)
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 7, 2009 09:37 PM (This post was last modified: Oct 8, 2009 06:55 AM by xSilent.)
Ok, with tutorials I made this crypter and binder in vb6. Now they are detected, but I tried to Hex it and I always screw up. If someone could help me that would be awesome. Well here they are

And I suck at GUI so I don't want to hear how bad it looks

If any of you want to help me then please add me

My yahoo messenger: killerxcrypter

Crypter:

[img]http://i416.photobucket.com/albums/pp241/4thkyutest/pic1.jpg[/img]

Binder:

[img]http://i416.photobucket.com/albums/pp241/4thkyutest/pic2.jpg[/img]

Virus Scans:
Note bstub is for the binder and Stub is for the crypter

File Info

Report generated: 8.10.2009 at 5.34.39 (GMT 1)
Filename: bstub.exe
File size: 20 KB
MD5 Hash: Removed
SHA1 Hash: Removed
Self-Extract Archive: Yes => RarSFX Archive
Binder Detector: Nothing found
Detection rate: 5 on 23

Detections

a-squared - Trojan-Dropper.Win32.VB!IK
Avira AntiVir - -
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
Ikarus T3 - Trojan-Dropper.Win32.VB
Kaspersky - HEUR:Trojan.Win32.Generic
McAfee - Generic VB.i trojan
NOD32 v3 - -
Norman - New unknown virus W32/Obfuscated.BQ!genr
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

Crypter Stub:

File Info

Report generated: 8.10.2009 at 5.34.39 (GMT 1)
Filename: Stub.exe
File size: 16 KB
MD5 Hash: Removed
SHA1 Hash: Removed
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 9 on 23

Detections

a-squared - Trojan.Inject!IK
Avira AntiVir - TR/Dropper.Gen
Avast - -
AVG - Dropper.Heliosb.N
BitDefender - Trojan.Dropper.VB.1
ClamAV - -
Comodo - -
Dr.Web - Trojan.PWS.Multi.76
Ewido - -
F-PROT6 - -
Ikarus T3 - Trojan.Inject
Kaspersky - -
McAfee - Generic VB.i trojan
NOD32 v3 - Win32/Injector.WZ
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - Trojan.VB.Motil
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

Client:

File Info

Report generated: 8.10.2009 at 6.54.39 (GMT 1)
Filename: Client.exe
File size: 52 KB
MD5 Hash: Removed
SHA1 Hash: Removed
Self-Extract Archive: Yes => RarSFX Archive
Binder Detector: Nothing found
Detection rate: 0 on 23

Detections

a-squared - -
Avira AntiVir - -
Avast - -
AVG - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
Ewido - -
F-PROT6 - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
NOD32 v3 - -
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - -
TrendMicro - -
VBA32 - -
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

Download Link Here

If anyone can help me Hex the stubs, it would be awesome

I hope you guys like it 👍

Binder:

Shapes = Add
Truck = Remove
Drill = Bind

Crypter:

Binoculars = Find
Safe = Crypt
Gizmo
Gizmo Offline
Come, lets drink a coffee.
***
HF Ub3r
Posts:
4,706
Threads:
244
Credibility:
000
Popularity:
149
βytes:
β 478.7
Game XP:
3
Oct 8, 2009 07:32 AM (This post was last modified: Oct 8, 2009 07:38 AM by Gizmo.)
I'm going to test this.

<short>>>>>>>>>>>>>>>>>>>>

Crypter is not fud anymore :p And as second, I can't find the binder.

File Info

Report generated: 8.10.2009 at 16.40.44 (GMT 1)
Filename: crypterll.exe
File size: 25 KB
MD5 Hash: db7a3fe0724fd475f7b21f6f428abcba
SHA1 Hash: BB497BC9B90A94DC39ADA0093509895054148575
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 11 on 23

Detections

a-squared - Trojan.Inject!IK
Avira AntiVir - TR/Crypt.XDR.Gen
Avast - Win32:VB-LTZ [Trj]
AVG - Dropper.Heliosb.N
BitDefender - Trojan.Dropper.VB.1
ClamAV - -
Comodo - -
Dr.Web - Trojan.PWS.Multi.76
Ewido - -
F-PROT6 - -
Ikarus T3 - Trojan.Inject
Kaspersky - -
McAfee - Generic VB.i trojan
NOD32 v3 - Win32/Injector.WZ
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - Mal/VB-AB
TrendMicro - -
VBA32 - Trojan.VB.Motil
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 8, 2009 07:40 AM
(Oct 8, 2009 07:32 AM)Gizmo Wrote:  I'm going to test this.

<short>>>>>>>>>>>>>>>>>>>>

Crypter is not fud anymore :p And as second, I can't find the binder.

File Info

Report generated: 8.10.2009 at 16.40.44 (GMT 1)
Filename: crypterll.exe
File size: 25 KB
MD5 Hash: db7a3fe0724fd475f7b21f6f428abcba
SHA1 Hash: BB497BC9B90A94DC39ADA0093509895054148575
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 11 on 23

Detections

a-squared - Trojan.Inject!IK
Avira AntiVir - TR/Crypt.XDR.Gen
Avast - Win32:VB-LTZ [Trj]
AVG - Dropper.Heliosb.N
BitDefender - Trojan.Dropper.VB.1
ClamAV - -
Comodo - -
Dr.Web - Trojan.PWS.Multi.76
Ewido - -
F-PROT6 - -
Ikarus T3 - Trojan.Inject
Kaspersky - -
McAfee - Generic VB.i trojan
NOD32 v3 - Win32/Injector.WZ
Norman - -
Panda - -
QuickHeal - -
Solo Antivirus - -
Sophos - Mal/VB-AB
TrendMicro - -
VBA32 - Trojan.VB.Motil
VirusBuster - -
ZonerAntivirus - -

Scan report generated by
NoVirusThanks.org

I know its not FUD, thats why I need help Hexing the Stubs..I always screw up lol and go to File and Binder
carnagez71
Guest
 
Oct 8, 2009 08:04 AM
could u fud my metus bot for free
Gizmo
Gizmo Offline
Come, lets drink a coffee.
***
HF Ub3r
Posts:
4,706
Threads:
244
Credibility:
000
Popularity:
149
βytes:
β 478.7
Game XP:
3
Oct 8, 2009 08:31 AM
(Oct 8, 2009 08:04 AM)carnagez71 Wrote:  could u fud my metus bot for free

Dude, why SPAM here? Read the thread first before posting anything dude.
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 8, 2009 09:11 AM
(Oct 8, 2009 08:31 AM)Gizmo Wrote:  
(Oct 8, 2009 08:04 AM)carnagez71 Wrote:  could u fud my metus bot for free

Dude, why SPAM here? Read the thread first before posting anything dude.

carnage failed lol
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 8, 2009 06:13 PM
Any help with hexing?
Frag_Bag
Guest
 
Oct 9, 2009 03:51 PM
Sorry dont know hexing, did you try a video tutorial?
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 9, 2009 10:19 PM
Most of the video tuts, dont deal with crypter stubs, thats why I need help
Ryxa
Ryxa Offline
It's been a long, long time
***
HF Ub3r
Posts:
3,204
Threads:
145
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 9, 2009 10:29 PM
What method are you using to hex edit the stub?
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 10, 2009 07:20 AM
(Oct 9, 2009 10:29 PM)Ryxa Wrote:  What method are you using to hex edit the stub?

uh, ok the video tutorial he was filling most of the stub with 00 and I tried doing that, but I screwed up my stub

and I dont understand file splitting

I'm using the HxD hex editor
Ryxa
Ryxa Offline
It's been a long, long time
***
HF Ub3r
Posts:
3,204
Threads:
145
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 10, 2009 10:09 AM
Well, I don't know about filling it in with zero's, but you're suppose to split the file, and scan then split the infected part, then scan, and so on, until you find the hex that's tagged by the antivirus. It should be something like "52". Just overwrite the 2 numbers with 2 zeros.
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 10, 2009 01:12 PM
(Oct 10, 2009 10:09 AM)Ryxa Wrote:  Well, I don't know about filling it in with zero's, but you're suppose to split the file, and scan then split the infected part, then scan, and so on, until you find the hex that's tagged by the antivirus. It should be something like "52". Just overwrite the 2 numbers with 2 zeros.

My AV sucks at just scanning files, but what AV do you suggest?
Ryxa
Ryxa Offline
It's been a long, long time
***
HF Ub3r
Posts:
3,204
Threads:
145
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 10, 2009 01:12 PM
(Oct 10, 2009 01:12 PM)xSilent Wrote:  
(Oct 10, 2009 10:09 AM)Ryxa Wrote:  Well, I don't know about filling it in with zero's, but you're suppose to split the file, and scan then split the infected part, then scan, and so on, until you find the hex that's tagged by the antivirus. It should be something like "52". Just overwrite the 2 numbers with 2 zeros.

My AV sucks at just scanning files, but what AV do you suggest?

Use MultiAV scanner when hexediting.
xSilent
xSilent Offline
One Chance, One Cut
***
HF Ub3r
Posts:
2,862
Threads:
297
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Oct 10, 2009 04:07 PM
(Oct 10, 2009 01:12 PM)Ryxa Wrote:  
(Oct 10, 2009 01:12 PM)xSilent Wrote:  
(Oct 10, 2009 10:09 AM)Ryxa Wrote:  Well, I don't know about filling it in with zero's, but you're suppose to split the file, and scan then split the infected part, then scan, and so on, until you find the hex that's tagged by the antivirus. It should be something like "52". Just overwrite the 2 numbers with 2 zeros.

My AV sucks at just scanning files, but what AV do you suggest?

Use MultiAV scanner when hexediting.


Do you have a link for a one that works? the one I have cant open files

If you do, thanks
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by vladimir2020Nov 16, 2023 03:04 PM 20 1,075 Nov 16, 2023 03:04 PM
Last Post: Theblazinghood
by Unam SanctamNov 2, 2023 09:36 AM 81 5,135 Nov 2, 2023 09:36 AM
Last Post: KrissTV
by EclipseSep 8, 2022 09:30 PM 11 651 Sep 8, 2022 09:30 PM
Last Post: AboHmam