Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C 

RAT in .Dll inject

Hi all.
Who is familiar with such a problem and can help me?
I have a self-written RAT.dll, on github I found dllinjector.c / .exe
How can I make one program out of these two programs so that when I start my RAT.dll is automatically added to kernel32.dll?
This can be done?
Hi!
You can "host" your rat.dll on discord, upload it in a conv. with a friend / bot and copy the direct download link. Edit your dllinjector.c and make it download the file from your direct link, then inject the dll into kernel. I don't know if you can somehow merge the dll with the exe, but atleast you can download it into appdata/temp (locations that don't require administrator privileges) and then inject it.
why you can't just use RunPE? or inject dll to some legit process, maybe discord.exe?
(Aug 20, 2021 03:54 AM)SIM-5063966 Wrote:  Hi!
You can "host" your rat.dll on discord, upload it in a conv. with a friend / bot and copy the direct download link. Edit your dllinjector.c and make it download the file from your direct link, then inject the dll into kernel. I don't know if you can somehow merge the dll with the exe, but atleast you can download it into appdata/temp (locations that don't require administrator privileges) and then inject it.

Even if it's a couple kilobytes, that network activity will likely be seen as suspicious by every semi-decent AV.
[Image: chain.png]
I want my malware code to be automatically added to kernel32.dll when I run my rat.exe
(Aug 20, 2021 10:54 AM)Sajuuk Wrote:  Even if it's a couple kilobytes, that network activity will likely be seen as suspicious by every semi-decent AV.

I don't really know, there are a lot of FUD droppers.
(Aug 20, 2021 11:31 AM)SIM-5063966 Wrote:  I don't really know, there are a lot of FUD droppers.

Well, I guess try it. If it works, stick with it.
[Image: chain.png]


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C] by SecurifierJan 17, 2020 07:20 AM 12 416 Jan 17, 2020 07:20 AM
Last Post: SIM-3602340
[C] by Mr. KimApr 8, 2017 04:30 PM 0 208 Apr 8, 2017 04:30 PM
Last Post: Mr. Kim
[C] by joebobApr 8, 2017 10:12 AM 6 359 Apr 8, 2017 10:12 AM
Last Post: joebob