[Aton]

Aurora Crypter

Input Payload

• Load from disk
  


• 64 bit .NET
  


• 32 bit .NET
  

Injection Method

• Reflective loading
  


• Run portable executable
  


• Portable executable loader shellcode
  

Payload

• Execution delay
  


• Loader mode manual
  


• Single instance
  


• Advanced runtime
  


• DLL unhooking
  


• Patch ETW
  


• WD AMSI patch
  


• WD exclusion
  


• Anti virtual machines and debug
  


• Anti file delete
  


• Run PowerShell
  


• Delete itself
  

Spoiler (Click to View)Sorry, I can't add images of the product until im upgraded :(

Contact Me For Demonstration and more Info!

Start Contract

[aj33b9009]

This is a marketing campaign for a non-existent product.