rootkit

NovoBot HTTP Botnet with rootkit ring0 You use TDL (Turla Driver Loader) to bypass Windows x64 Driver Signature Enforcement, compiled binaries, they don't care about C+P code. For UAC operation you use UACme, as well as binary compilations armed in resources. HTTP communication with web panel...

Phantom Crypter Phantom is an antivirus evasion tool that can convert executables to undetectable batch files. Features .NET/Native (x64/x86) support AES encryption Compression Anti Debug Anti VM Melt file (Self Delete) Bind files AMSI bypass ETW bypass UAC Bypass Startup Bootkit / Ring 0...