I had made a rat a while ago, but I tried putting the .exe file into virus total just to see what would happen and of course it led to a load of red flags. If I wanted to make this undetectable how would I go about doing so? For educational purposes.
How to make a RAT undetectable? |
    (Apr 10, 2020 12:34 AM)4Txe4y33C9zvNhMj Wrote: Write your own or buy some crypter (or write your own) Developing a crypter is not for everyone. Considering OP asks how to make something UD gives me the impression he cannot write anything close to crypter Жизнь это не те дни, что прошли, а те, что запомнились
 (Apr 9, 2020 06:14 PM)Darnyx Wrote: I had made a rat a while ago, but I tried putting the .exe file into virus total just to see what would happen and of course it led to a load of red flags. If I wanted to make this undetectable how would I go about doing so? For educational purposes. This is not related to your question but for your knowledge= Using virustotal? Even if your unpopular rat is somehow less detectable by most of the AV's it'll NO MORE be after uploading it in Virustotal. Because virustotal sends the files to AV companies for analysis. Make sure to use other AV detection sites which do not send the data back to AV companies. BitRAT 10% Max. Discount Coupon - BR-85684-270E3
![[Image: NLSQPt3.gif]](https://i.imgur.com/NLSQPt3.gif)
Apr 10, 2020 01:09 AM
(This post was last modified: Apr 10, 2020 01:10 AM by SIM-4581439.)
On a side note, use KleenScan instead, as virustotal distributes scan logs.
Apr 10, 2020 06:29 AM
(This post was last modified: Apr 10, 2020 06:30 AM by godforsaken.)
Get a crypter. It's a tool that encrypts and then embeds the payload (your RAT stub) in it's own stub. The payload is encrypted, so the AV can't flag it. The crypter should also use some sneaky tricks (Dynamically calling all the functions, anti debug/anti vm, remake GetProcAddress and LoadLibrary) to avoid getting detected by AV. And every crypter SHOULD run the payload from memory (without writing to disk).
I have some. If you're interested, PM me. EDIT: DONT UPLOAD TO VIRUSTOTAL, THEY DISTRIBUTE YOUR STUB TO DIFFERENT AV VENDORS.
Apr 12, 2020 12:04 PM
(This post was last modified: Apr 12, 2020 12:06 PM by hdawg12.)
(Apr 10, 2020 12:34 AM)4Txe4y33C9zvNhMj Wrote: Write your own or buy some crypter (or write your own) where would you go to buy one? where would you go to learn to create your own? (Apr 10, 2020 01:06 AM)Ranker Wrote: This is not related to your question but for your knowledge= i have been avoiding virustotal. What other website do you suggest to go in order to test your RAT? (Apr 12, 2020 12:04 PM)hdawg12 Wrote: where would you go to buy one? I wouldn't pay for a RAT and I'll help you, shoot me your Discord or something in a convo.
Apr 12, 2020 06:50 PM
(This post was last modified: Apr 12, 2020 07:03 PM by hdawg12.)
(Apr 12, 2020 12:10 PM)4Txe4y33C9zvNhMj Wrote: I wouldn't pay for a RAT and I'll help you, shoot me your Discord or something in a convo. Discord? what do you mean? (Apr 10, 2020 06:29 AM)godforsaken Wrote: Get a crypter. It's a tool that encrypts and then embeds the payload (your RAT stub) in it's own stub. The payload is encrypted, so the AV can't flag it. The crypter should also use some sneaky tricks (Dynamically calling all the functions, anti debug/anti vm, remake GetProcAddress and LoadLibrary) to avoid getting detected by AV. And every crypter SHOULD run the payload from memory (without writing to disk). Is crypter free? Where can I download it? I use Kali linux. Is it better than Fat Rat? Does anyone use TheFatRat anymore? (Apr 12, 2020 06:50 PM)hdawg12 Wrote: Discord? what do you mean? Don't use Kali. It most likely isn't suited for your use. I was refering to the instant-messenging platform Discord, https://discordapp.com/. A crypter can be free if you write one yourself, most crypters are probably sold as commercial products. (Apr 13, 2020 12:18 AM)4Txe4y33C9zvNhMj Wrote: Don't use Kali. It most likely isn't suited for your use. As far as Kali goes, I've been using Kali linux for a year or so. I'm pretty much familiar with it and can get myself around. I went ahead and registered for Discord. Do I just add your username? (Apr 13, 2020 12:40 PM)hdawg12 Wrote: As far as Kali goes, I've been using Kali linux for a year or so. I'm pretty much familiar with it and can get myself around. I went ahead and registered for Discord. Do I just add your username? Still don't recommend Kali, especially not as a daily driver. Just PM me your username & discriminator (the 4 numbers) and I'll add you. |
|
|
