[Phantom_Services]

Hey, currently writing a Crypter and i am having Problems with Xworm.

Loading and running works, but when i run the recovery function it crashs.

I noticed that the exe is x32 but the process runs as x64. If you know whats wrong let me know. also tried runpe for .net x32 but didnt worked.

I also tried injecting my loader with donut into a process and then loading it but didnt worked.
Used Assembly.Load() after amsi patch etc, all runs but crashs when i run recovery x64 and x32...


Thanks for your help.

[fscammers]

which crypter do you use?

[Py_Dev]

Assembly.Load() might have an issue identifying xworms entry point. Hope this helps :)

[Horus_Protector]

This method only works for Windows Defender.

[Phantom_Services]

Assembly.Load() might have an issue identifying xworms entry point. Hope this helps :)

No, it works and xworm connects.

But once i run the recovery option it crashs...

[StuntD]

is there any Rat out there that is much better than xworm ?