I've currently got my crypter and program down to 3/26 using a refud of runPE and cannot bypass Trojan.TR/Dropper.Gen.
https://antiscan.me/scan/new/result?id=ma24fHL8xn1j
https://antiscan.me/scan/new/result?id=ma24fHL8xn1j
|
C#
How do I bypass Trojan.TR/Dropper.Gen with runPE? |
|
I've currently got my crypter and program down to 3/26 using a refud of runPE and cannot bypass Trojan.TR/Dropper.Gen.
https://antiscan.me/scan/new/result?id=ma24fHL8xn1j
(Apr 11, 2020 04:45 AM)Cʀᴏᴡ Wrote: Hey, man at least you're bypassing Avast. That's a plus. True, I could look at the ups, just I thought I was doing well by changing the information and so on, but I cannot seem to add the registry startup properly in the injection either... But it sends past av's which is a plus.
Apr 11, 2020 05:42 AM
(This post was last modified: Apr 11, 2020 05:43 AM by Cʀᴏᴡ.)
Yeah, i'm having trouble with the registry as well. It adds to the Current User but not into the "run" part.
But i know why that is, because my file does not get dropped on the disk it's going straight to memory so when the target executes it, i'll half to add it by hand. Which sucks. Wish i was friends with a programmer so i could get some help but when you ask for help anywhere on the internet you get yelled at hahaha. I just look at other code and try to add it to my code the best way i can, but sometimes it does not work out cause i don't have enough arguments in the code.
Apr 11, 2020 07:04 AM
(This post was last modified: Apr 11, 2020 07:05 AM by VisualSoft.)
(Apr 11, 2020 04:45 AM)Cʀᴏᴡ Wrote: Hey, man at least you're bypassing Avast. That's a plus. Avast is much easy to bypass then avira. (Apr 11, 2020 06:47 AM)youlded - has1 Wrote: Most of those methods aren't going to be free, with that knowledge you can sell a crypter on here. I agree with you my friend.
Apr 11, 2020 08:03 AM
(This post was last modified: Apr 11, 2020 08:04 AM by Cʀᴏᴡ.)
(Apr 11, 2020 07:04 AM)VisualSoft Wrote: Avast is much easy to bypass then avira. I kinda figured avast would be really hard to bypass haha but yet again i hardly know what i'm doing, but i am getting better. I just need to learn some technique's. I'm scared to buy a crypter on here cause i got a lot of feed back, saying "crypters on HFs don't do much. But that's just what i heard. I love messing around with base64 strings. If i can figure out some new technique's i'll be good to go. I just need to learn a bit more. It's just really hard learning on you're own cause you don't know where to start hahaha. (Apr 11, 2020 03:16 AM)ArcticSlay Wrote: I've currently got my crypter and program down to 3/26 using a refud of runPE and cannot bypass Trojan.TR/Dropper.Gen. I don't think someone will give you free tutorial on how to refud or how to bypass specific av otherwise no one will sell private stubs or public crypter on HF.... post here Service Requests and you will get help within a day or two
Apr 11, 2020 12:21 PM
(This post was last modified: Apr 11, 2020 12:21 PM by n0$f3ratu$.)
(Apr 11, 2020 03:16 AM)ArcticSlay Wrote: ...... Are you positive that detection is from runpe? Are you sure is not from Assembly.Load or resources?
Apr 11, 2020 05:49 PM
(This post was last modified: Apr 11, 2020 05:51 PM by Redrum.)
You could try zipping the Binary in the res instead of just encrypting?
I've bypassed it before using passworded zip files to hold binary in res before
Apr 11, 2020 09:42 PM
(This post was last modified: Apr 11, 2020 09:52 PM by ArcticSlay.)
(Apr 11, 2020 11:18 AM)NYANxCAT Wrote: I don't think someone will give you free tutorial on how to refud or how to bypass specific av otherwise no one will sell private stubs or public crypter on HF.... Thanks, yeah I don't need help on the refud, just wondering basically what that antivirus detection was basically, so if I know what it is, I can find a way around it without exploiting people for free services. (Apr 11, 2020 05:49 PM)Redrum Wrote: You could try zipping the Binary in the res instead of just encrypting? Thank you for the feedback, I will try. (Apr 11, 2020 12:21 PM)n0$f3ratu$ Wrote: Are you positive that detection is from runpe? I am not to be honest. I'll check other ways around, ty. (Apr 11, 2020 08:03 AM)Cʀᴏᴡ Wrote: I kinda figured avast would be really hard to bypass haha but yet again i hardly know what i'm doing, but i am getting better. I am a noob when it comes to that too man, it's a cool learning experience. HMU on discord for some ideas to share lol Arctic#3060 |
|
|
| Possibly Related Threads... | |||
| Thread / Author | Replies | Views | Last Post |
| [C] by PulseLinkApr 8, 2024 05:06 PM | 4 | 232 |
Apr 8, 2024 05:06 PM Last Post: PulseLink |
| [C] by Vector.A+Jul 1, 2020 03:41 PM | 0 | 153 |
Jul 1, 2020 03:41 PM Last Post: Vector.A+ |
| [C#] by notahackermanApr 26, 2020 11:32 PM | 17 | 777 |
Apr 26, 2020 11:32 PM Last Post: Shadow_Cloud |