Is there any way / code for a crypter to minimize the Output file / compress it or somehing like that?
Or are there any possibilities to reduce the Stub size?
Or are there any possibilities to reduce the Stub size?
|
.NET
Reduce Stub Size |
(Dec 16, 2018 07:36 AM)Alx0 Wrote: Is there any way / code for a crypter to minimize the Output file / compress it or somehing like that? How large is the stub your producing and what dependencies are you using? ![]()
Dec 16, 2018 09:41 AM
(This post was last modified: Dec 16, 2018 09:43 AM by gigajew.)
Here's a simple zip-based packer if that's all you need https://my.mixtape.moe/jzvhvu.zip merry christmas
VirusTotal scans: Archive: https://www.virustotal.com/#/file-analys...NDk3ODU0MA== Binary: https://www.virustotal.com/#/file/68a978.../detection If you're trying to implement this in your code, just use GZipStream or like I did; ZipArchive ![]() (Dec 16, 2018 09:33 AM)Dredd Wrote: How large is the stub your producing and what dependencies are you using? My Stub is 16KB ( i know not much) But my Server is about 400KB so i want to compress this size with the stub in it to e.g 50KBytes or something like that. At the moment the stub is only the decryption function (rc4) but soon there will be many functions (startup, Persistence...) and the stub will be much larger... (Dec 16, 2018 10:52 AM)NYANxCAT Wrote: You can just use a plugin system instead of putting all the functions together in 1 assembly. What do you mean with a plugin system?
Dec 16, 2018 02:12 PM
(This post was last modified: Dec 16, 2018 02:14 PM by NYANxCAT.)
Using a DLL as a plugin, same as njRAT, Revenge-RAT and LimeRAT.
Example, a plugin to restart and update client https://github.com/NYAN-x-CAT/Lime-RAT/t...lugins/PCL (Dec 16, 2018 01:52 PM)Alx0 Wrote: What do you mean with a plugin system? If you’re going to go down the path of a plugin system to stage your payload, I would highly recommend not reading anything produced by NYAN-x-CAT as their code is unreadable/has zero flow, utilizes bad practices, and is unoptimized. I’d suggest taking a look into using the command pattern along with a proxy pattern for your plugins, it’s not a simple solution and can be a bit complex. There’s plenty of examples online for VB.NET and C#, I’m not going to spoon feed them to you, but here’s a few wiki articles on the concepts. https://en.wikipedia.org/wiki/Command_pattern https://en.wikipedia.org/wiki/Proxy_pattern |
|
|
| Possibly Related Threads... | |||
| Thread / Author | Replies | Views | Last Post |
| [C#] by altanaMar 3, 2022 04:54 AM | 28 | 1,110 |
Mar 3, 2022 04:54 AM Last Post: goodrabbit |
| [C] by helloworld112Jul 11, 2020 02:40 AM | 1 | 151 |
Jul 11, 2020 02:40 AM Last Post: greasyAlessandra |
| [C] by SIM-3149568May 9, 2020 09:20 AM | 3 | 171 |
May 9, 2020 09:20 AM Last Post: 0xDEAD10CC |