haZl0oh escribió:
This was a private project never shared into public till now.
Today i choose to release a public copy for dedicated forums.
It is strictly forbidden to share it to other forums without having my
YES for it.

Hope some of you enjoy it pls give comments.

Credits:
---------------------
- Enzym (read/write EOF)
- Cobein (splitter module)
- Arkadiy Olovyannikov ( for his injection code)
- [Enlace externo eliminado para invitados] - coders for ideas and snippets
- Iconchanger ( cant find the coder ...feel credited if it was yours)



Crypter supports usage of:

- custom stubs
- 32bit icon changer
- 1 file Binder
- Runtime undetected ( except the binder bound file is just that undetected as you put it in)



-----------------------------
works with all common Rats and tools
for example :
- Bifrost
- Poison Ivy
- Spynet
- iStealer
- and a lot more

Código: Seleccionar todo

haZl0oh 2009
(contact me for private versions)

Shouts:
---------------------
Hackhound.org
- Steve10120
- Cut throat
- Birdy9 
- omc
- jonhyk
- Slayer616
- and all i forgot ... sorry :D next time ahhh... ixeman :D

Dark-Matrix.com
- Luppa
- boeser_enkel
- fred777
- maddin

Tr0jan.net
- Who

Indetectables.net
- Polifemo
dubiously-crew
- File
- madDin

It wont be 100% Undetected . This is the first build i ever did(some time ago! Feels free to modd it........
(but should work bug free).


:D just replace it in your folder

Fuente: Hackhound.org

Aqui les dejo el scan:

File Info

Report generated: 20.5.2009 at 4.05.58 (GMT 1)
Filename: Encrypted.exe
File size: 128 KB
MD5 Hash: 5F5362FAE6BE6587C0BB9D1BC8F023C0
SHA1 Hash: 2F742FDEF53532FB2E961D890742D7A209EA2642
Packer detected: Nothing found *
Self-Extract Archive: Nothing found
Binder Detector: Nothing found
Detection rate: 3 on 24

Detections

a-squared - Trojan-Dropper.Win32.VB!IK
Avira AntiVir - TR/Dropper.Gen
Avast - Nothing found!
AVG - Nothing found!
BitDefender - Nothing found!
ClamAV - Nothing found!
Comodo - Nothing found!
Dr.Web - Nothing found!
Ewido - Nothing found!
F-PROT 6 - Nothing found!
G DATA - Nothing found!
IkarusT3 - Trojan-Dropper.Win32.VB
Kaspersky - Nothing found!
McAfee - Nothing found!
MHR (Malware Hash Registry) - Nothing found!
NOD32 v3 - Nothing found!
Norman - Nothing found!
Panda - Nothing found!
Quick Heal - Nothing found!
Solo Antivirus - Nothing found!
Sophos - Nothing found!
TrendMicro - Nothing found!
VBA32 - Nothing found!
Virus Buster - Nothing found!

Scan report generated by
[Enlace externo eliminado para invitados]

En el rar puse las ocx y demas... [/size]

[Enlace externo eliminado para invitados]

Gracias demonio, ahora el a-quared y el ikarus tienen la misma firma que el antivir , bueno gracias por compartir.

Saludos

Gracias demonio

Ummmmmmm~~~~~~~~~~........
Asian users can not access ~ [Enlace externo eliminado para invitados]
Please replace the download address~Very Thanks??

aa7269030 escribió:Ummmmmmm~~~~~~~~~~........
Asian users can not access ~ [Enlace externo eliminado para invitados]
Please replace the download address~Very Thanks??

Ya le entendi a este tio, lo que quiere decir es que los usuarios asiaticos no pueden conectarse a megaupload, por eso pone siempre "Asian users can not access ~ [Enlace externo eliminado para invitados]".

Download:

[Enlace externo eliminado para invitados]

Saludos

thanks Demonio por el aporte..

excelente demon cada vez se complica mas para sacar las firmas

abrazo

Demonio muy buen aporte .....

muy racing tu firma...que carrazo...

mmmmm tengo que hacer uno de estos pero con downloader

salu2

Gracias demo!

*Firma: a-squared/IkarusT3 - offset = 19999 {FF = EF}

Saludos

gracias se mira muy bueno

alguien tien la nueva stub si los 2 antivirus?

Infectedshot escribió:alguien tien la nueva stub si los 2 antivirus?

bob.exe escribió:Gracias demo!

*Firma: a-squared/IkarusT3 - offset = 1999 {FF = EF}

Saludos

Que mas quieres????