Advanced Defense & Evasion Source Code - ETW, and More

[pryx]

Цена

5000-100000

Контакты

Signal : @c55.77

Selling Advanced malware project focusing on defense and evasion:
4 new techniques specially made for this project.
Language: C
Detections: never scanned it with VirusTotal, you obviously know why, but I installed real antivirus software on my device. I will attach screenshots of bypass.
U can offer a price in dms, Signal : @c55.77

Features:​

• CRT Removal: Removes C Runtime for evasion.
• Condition Camouflage (New Technique): Confuses the malware researcher with if-else statements.
• IAT Camouflage: It calls a Windows API built-in function, but the program doesn't use it to camouflage the malware researcher.
• Fiber Utilization: Uses fibers instead of threads to complicate analysis.
• API Hashing: Invokes system functions using their hashed names rather than their conventional names to hide it from import address table.
• Linked DLL Discovery (New Technique): New method for identifying linked DLLs.
• NTDLL Unhooking: Removes hooks in NTDLL.dll to bypass security products.
• Up-time Detection (New Technique): Identifies sandbox environments by calculating the system's uptime.
• ETW Bypass: Bypasses Event Tracing for Windows to avoid monitoring.
• Tria.ge Sandbox Detection (New Technique): Specifically designed to detect and evade Tria.ge sandbox.
• Anti-Debug Techniques: Includes TLS callbacks, PEB structure manipulation, and time-of-execution functions.
• Self-Delete: Ensures self-deletion after execution.

These bypassed and more...

Also, please rate the project and share your thoughts, it helps a lot.

 

[pryx]

Forgot to add kaspersky in the bypassed screenshots

 

[pryx]

Admin or moderator please remove bit defender 0day from the title, it has been patched

 

[varwar]

Обращение к возможным покупателям. Сначала я закрыл тему на депозит по жалобе, но продавец ко мне обратился и предложил отправить на проверку свой проект и честно признался, что денег у него на депозит нет. У меня нет времени проверять чужие проекты и верифицировать его уникальность, поэтому используйте гаранта и тщательно обсуждайте все детали перед покупкой.