[WraithTools]

x47.c Version 3.9.7

THE PLATFORM
x47.c is a private Windows botnet stack built for operators who refuse to lose bots, refuse truncated loot, and refuse toy panels. Compact stub. Full Custom C2 Panel. Hybrid P2P that keeps you in even when the main C2 blinks. Revolutionary AI Stealth that thinks for the bot and repairs survival on the host. Eighteen-type DDoS including AI API draining. Stealer, SOCKS5, rootkit, botkiller — the full plugin suite in one package.

This is not a checklist product. This is infrastructure.

WHAT SHIPS
Custom C2 Panel (desktop operator UI)
Matching C2 server for your VPS (HTTPS bots + WebSocket panel + live terminal CLI)
1 custom bot build with 2 domains (primary + backup failover)
Output format choice: EXE, standalone DLL, or both from the same build
1 free rebuild if you need a domain/auth correction or a fix on our side
Modules unlocked to match what you buy (base or full stack)

You provide domains (and your xAI API key for AI Stealth). We deliver the build, server package, and panel access. Builds stay with us.

WHY OPERATORS BUY THIS
Dual-domain C2 failover baked into every bot — primary dies, backup takes over
Hybrid P2P mesh so you never lose access when a hop drops
Revolutionary AI Stealth that keeps bots alive without babysitting every host
EXE + standalone DLL output — drop either form, or both; DLL never depends on the EXE
Full plugin suite: rootkit, SOCKS5, stealer, DDoS, botkiller, persistence, stealth
Custom C2 Panel — purpose-built control surface, not a generic dashboard
Live C2 terminal with join/leave panels and fleet status
Tiny hardened Windows stub designed to survive and report

REVOLUTIONARY AI STEALTH
Most loaders “hide once” and hope. x47.c runs a continuous AI stealth monitor on the bot itself.

Bot phones home to xAI / Grok with your API key (you bring the xAPI key)
Host is scored: persistence present? file hidden? sandbox signals? admin? hollowed?
AI returns allowlisted remediation ops only — no reckless free-form shell
Ops include: repair persistence, rehide file, reapply rootkit, reapply WD exclusion, anti-debug, controlled sleep, noop
If install paths or stealth state break, the bot repairs itself on a jittered schedule
Fallback local remediation if the API blips — survival does not depend on a perfect round-trip
Status events stream to the Custom C2 Panel Stealth view so you see what the AI applied

Result: bots that heal. Persistence that comes back. Concealment that re-applies. You keep the fleet alive while competitors watch installs rot after the first cleanup.

HYBRID P2P — YOU NEVER LOSE ACCESS
C2 alone is a single point of failure. x47.c runs a Hybrid P2P mesh alongside HTTPS check-in.

Authenticated UDP mesh between bots (HMAC — your auth key is the secret)
Peer discovery, live peer tables, manual/bootstrap connect by ip:port
Mesh inject / hybrid execute — push a command into the peer network, not only the C2 queue
When a bot can still reach peers, the network stays usable even if a C2 hop is degraded
Custom C2 Panel shows live connected peers in Bot Details
Dual-domain HTTP C2 + P2P together = access that outlasts a single server bad day

This is the difference between “panel went quiet” and “fleet still answers.”

DDoS ENGINE — FULL ARSENAL
Eighteen attack types. Launch and stop from the Custom C2 Panel on selected bots.

HTTP flood / HTTP raw / HTTP random
Cloudflare and UAM bypass paths
Slowloris
TCP flood / UDP flood / SYN flood
TLS and raw socket stress
GRE
Amplification: DNS, NTP, SSDP, Memcached
Generic stress mode
AI API drain — burn OpenAI / xAI / compatible chat APIs with heavy completion traffic (token and cost pressure, not just bandwidth)

Controlled targeting. No accidental whole-fleet fire unless you choose it. Stop is first-class.

FULL PLUGIN SUITE

Rootkit
Deeper host concealment on top of base stealth. Harder to spot. Harder to rip out. Re-applicable via AI Stealth when enabled.

SOCKS5 reverse proxy
Turn bots into authenticated SOCKS5 exits through NAT. Reverse tunnel to C2, public entry ports, username/password (RFC 1929). Panel SOCKS tab + health checks. Browse and route through live bots.

Stealer
On-demand harvest (steal_all): Chromium login patterns, wallets, Discord/Telegram, AI-site tokens. Full JSON exfil to C2 — not truncated junk. Logs on disk + live Stealer view in the panel.

Botkiller
Scan and clean competing malware artifacts so your bot owns the box.

Persistence + base stealth
Install, survive reboot, stay quiet. Dual-domain register/heartbeat. Commands: dl/exc, update, uninstall, hybrid/mesh execute, and more.

EXE / DLL dual output
Master Builder emits EXE only, DLL only, or both. Same C2, auth, and IOCs. The DLL is fully standalone (rundll32 load) — it does not load or need the EXE. Choose the drop format that fits the host; ship both when you want options.

DDoS + AI Stealth
As above — pressure and survival in the same build.

CUSTOM C2 PANEL
Bot list, filters, multi-select
Bot Details — OS, geo, SOCKS, live P2P peers
Console for typed commands
SOCKS5 tab
P2P / mesh inject
Stealer Logs
Stealth / AI status
DDoS launcher
Mobile status page (/hud)

C2 SERVER
Ubuntu-ready deploy
TLS
Auth-gated REST + WebSocket for the panel
SOCKS reverse relay
Interactive CLI — banner, live joins, status / bots / proxies / help
Runs beside an existing website on a free port (e.g. 8443)

DELIVERY
You provide: 2 C2 domains (+ xAI API key if taking AI Stealth)
We deliver: 1 patched bot build (EXE, DLL, or both) + matching C2 package + Custom C2 Panel access
Included: 1 free rebuild (domain/auth correction or our defect)
Extra rebuilds / domain swaps billed separately

PRICING

Base Loader — $200
P2P, basic commands, botkiller
Custom C2 Panel + C2 server
1 build · 2 domains · 1 free rebuild

Additional modules
Rootkit (RK) — $100
SOCKS5 — $200
DDoS — $150
AI Stealth (xAI API key required) — $300
Stealer — $350

Full Stack — $950
Base + every module above
Hybrid P2P, AI Stealth, DDoS arsenal, SOCKS5, stealer, rootkit, botkiller
Custom C2 Panel · dual-domain build · 1 free rebuild

PM to buy
Start Contract