Flashing Victims on RAT controller.

[Amyweiser]

Good day guys. So i have an issue. I got a moded version of Async RAT from someone and he offered to crypt it with a private crypter. It showed 0 detections afterwards but when i send the virus out to people, i got connections which all stayed for about 20-50 seconds and vanished. Some of them didn’t even have antivirus while some had only windows defender. I have faced this issue (flashing of clients) before with different RATs. Can someone clear me out on why this is happening? Is it the crypter or the RAT or something else. Also i feel he crypted it with a scantime crypter and not a runtime crypter. People have suggested getting a $750 cloudeye crypter but I doubt why i need to since some of these connections had no antivirus but still got disconnected. A detailed explanation will be appreciated. Thanks

Ps: the pictures below are evidence of my story.

 

[badcapper]

choose another malware

 

[Amyweiser]

That was my thought. But i tried tested this malware in my friends pc and it brought out all his saved passwords although he doesn’t have an antivirus.

choose another malware

 

[rlz]

The RAT you are using is detected that is the reason for flashing. The crypter's usually make sure the delivery is done but many times the RAT signatures are caught by the antivirus. No matter which crypter you use if the RAT features or patterns are matched the exe will get detected and deleted.

 

[phicker]

Is there any other GUI Rat recommand?

 

[Jenkins]

txt me in pm

 

[masteryodax]

very best rat njrat

 

[losot]

RAT has a backdoor

 

[Pernat1y]

RAT has a backdoor

What RAT? Where?

 

[sosenmann]

rat is runtime detected and gets blocked by av