[ZOOMMYZZ]

I BUILT A SILENT LNK FILE WHICH DOWNLOADS AND RUNS MY RAT SILENTLY, IT WORKS WELL WITH MY JS RAT BUT THE PROBLEM IS MY JS RAT AFTER CRYTING IT INFECTS BUT AFTER FEW MINUTES OF INFECTING WINDOWS DEFEEND BLOCKS THE WSCRIPT.EXE, I NEED HELP

[PISTONZ]

If it is works well bypass AV before crypt.
so why you needed to crypting.

[ZOOMMYZZ]

If it is works well bypass AV before crypt.
so why you needed to crypting.

The LNK doesn't need crypting but the rat that it will download and execute needs crypting

[Binance]

The LNK doesn't need crypting but the rat that it will download and execute needs crypting

Then find a crypter that can hollow plugins?
Doppelganging where ntfs transactions is still possible for PID's that arent verif processes.

[ShellPower]

Hey i am a complete noob, but sounds like its a "runtime obfuscation" issue, ie the part after you already run your file

[SIM-5186353]

You created a downloader that downloads a non-crypted rat??

Whats the porpuse of the downloader then??

[Aadgjmptw72]

Sounds like you are skipping a step - keeping your RAT FUD is going to be an incredibly difficult task. I recommend you add another stage in between those two steps. What you need is a small program (obfuscated) to run that first disables WD, then downloads and executes your PL.

LNK file --> Disable WD / Downloader (obfuscated) --> RAT

You'll have a much easier time keeping the disabler/downloader FUD. You can also add another stage that checks for the existence of any other AV before unpacking and running your payload.

Just vibecode something brother, couldn't be any easier.

[ZOOMMYZZ]

The LNK doesn't need crypting but the rat that it will download and execute needs crypting

Yea bro, I need good crypter

[DramaKing]

Yea bro, I need good crypter

I can provide a FUD loader that disables WD with Tamper Protection. The LNK will have Mark of the Web, so beware of that.