Sep 26, 2026 06:48 PM
(This post was last modified: Oct 5, 2026 05:15 PM by D_3_I_M_0_S.
Edit Reason: Added longer video, removed pictures since the video shows it all
)
Core Features
[+] Native compiled wrapper via Go shim (win_x64, lnx_x64, lnx_arm64, osx_arm64, osx_x64)[+] True cross-platform native support across Windows, macOS, and Linux
[+] 18 on-demand modules (in-memory only, loaded reflectively, nothing drops to disk)
[+] Modular architecture (activate only what the operation requires)
[+] End-to-end encrypted Custom Binary Protocol operating over SOCKS5 / TCP
[+] Multi-client management server console with live telemetry and session overviews
[+] Zero-configuration Tor Hidden Service integration (v3 .onion)
[+] Automatic Tor SOCKS5 Gateway Tunneling
[+] Adaptive Dual-Transport Layer (Seamlessly switches between Onion Routing and Direct TCP)
[+] Two-Stage Dropper decouples initial access vector from the core payload
[+] Full Unicode support for all languages and regions
Remote Control & Surveillance
[+] Hidden Virtual Desktop (hVNC)
[+] File Manager (fully featured remote browsing, transfer, upload, and execution)
[+] Task Manager (live process listing, suspend, kill, and injection capabilities)
[+] Advanced Keylogger (real-time live streaming with offline buffering & bulk exfiltration)
[+] Webcam Capture (silent image snapshotting and live video streaming)
[+] Live Microphone (real-time environmental audio capture and streaming)
[+] Registry Manager (full read/write/delete capabilities across all hives)
[+] Startup Manager (dynamic persistence control from the server)
[+] Reverse Proxy (pivot the compromised host into a network exit node)
[+] Interactive Shell (full reverse shell and terminal access)
[+] Desktop Surveillance (live active desktop screenshot capture and streaming)
[+] Power Controls (remote shutdown, restart, and sleep execution)
[+] Network Spreader (automated movement across local networks)
[+] USB Spreader
[+] Fleet Updater (hot-swap payloads dynamically across your entire node network)
Advanced Persistence
[+] Windows: Registry-based autorun and scheduled tasks
[+] macOS: LaunchAgent plist under ~/Library/LaunchAgents/
[+] Linux: systemd user unit injection and crontab cascades
Evasion & Anti-Analysis
[+] Process Hollowing (in-memory execution within trusted process hosting)
[+] AMSI Patching (runtime bypass of the Antimalware Scan Interface)
[+] ETW Bypass (Event Tracing for Windows suppression)
[+] NTDLL Unhooking (dynamic removal of security tool hooks)
[+] macOS Gatekeeper Bypass (automated quarantine attribute stripping & ad-hoc codesigning)
[+] Linux Evasion (ptrace TRACEME and advanced container detection)
[+] Multi-Layer Anti-Analysis (comprehensive Anti-VM, Anti-Sandbox, and Anti-Debug checks)
[+] Benign Masquerading (detached execution under deterministic OS daemon names)
[+] Polymorphic Engine (dynamically mutates signature and structure upon deployment)
[+] Build-Time Crypter (absolute cryptographic obfuscation unique to every single build)
Intelligence Gathering & Privilege Escalation
[+] UAC Bypass
[+] Credential Harvesting (extracts saved passwords, cookies, and tokens from all major browsers)
[+] Crypto Wallet Stealer
[+] Ransomware Engine
Builder & Deployment
[+] Dynamic Obfuscation (unique encryption of strings, configs, and payloads per build)
[+] LNK Wrappers
[+] Agent Binding (EXE, Word, Excel & PDFs)
Monero only payments accepted.
[+] 1 MONTH: $350
[+] 3 MONTHS: $700
[+] 1 YEAR: $2,925
Middleman/escrow services are welcome at your own expense.
ONLY Contacts:
Signal: @deimos.09
Telegram: @D_3_I_M_0_S
Latest scan with antiscan me
Start Contract
![[Image: 55185669047_3375ed9327_z.jpg]](https://live.staticflickr.com/65535/55185669047_3375ed9327_z.jpg)
