使用winrar捆绑自解压方式制作木马

lollipop

使用winrar捆绑自解压方式制作木马

最近跟着大佬学了一手利用捆绑自解压压缩包绑定木马的操作,把木马文件和一个正常的文件通过压缩软件捆绑压缩,然后引诱用户下载安装,让用户在安装正常软件的同时。把木马安装到了自己的电脑里面,下面,我就介绍一下过程。
1、首先大家先通过coblatstrike或者msfvenom 生成一个木马“qq.exe”。然后准备一个flash的安装程序。
2、鼠标右键,添加到压缩文件。点击创建自解压格式压缩文件。rar就会变成exe后缀的文件。

3、点击高级–>自解压选项–>常规

解压路径->绝对路径
C:\windows\temp。

4、设置
提取后运行
C:\windows\temp\qq.exe
C:\windows\temp\flashplayer_install_cn.exe

5、模式

安静模式->全部隐藏

6、更新

更新方式->解压并更新文件

覆盖方式->覆盖所有文件

7、模块

最后一步选择自解压模块,选择”Default64.SFX”,不然压缩后的文件解压缩式会出现解压缩提示界面,就暴露了。

8、点击确定按钮,在点击确定按钮生成”新建文件夹.exe”

9、修改文件名为flashplayer_install_cn.exe。这时候已经可以使用了,只是太丑。另一个神器出现“ResourceHacker”。

通过ResourceHacker打开原版的flash安装程序,点击Icon Group文件夹中的文件,鼠标右键保存“*.ico资源”,即可导出ico图标。

10、利用同样的方法打开制作好的钓鱼木马,找到“Icon Group”,鼠标右键,“替换图标”,选择导出的flash.ico,确认之后点击左上角的“文件”->“保存”即可。

这时候一个完美的捆绑木马就做好了,然后在监听端口监听鱼儿上钩即可,是否免杀是取决于你的木马程序是否免杀。

4 thoughts on “使用winrar捆绑自解压方式制作木马

  1. Long time supporter, and thought I’d drop a comment.

    Your wordpress site is very sleek – hope you don’t mind
    me asking what theme you’re using? (and don’t mind if I steal it?
    :P)

    I just launched my site –also built in wordpress like yours– but the theme slows (!) the site down quite a
    bit.

    In case you have a minute, you can find it by
    searching for “royal cbd” on Google (would appreciate any feedback) – it’s still in the works.

    Keep up the good work– and hope you all take care of yourself during the coronavirus scare!

    ~Alex

    P.S. Do you find using an .xyz domain helps people find your site, or
    do people get confused when you don’t have a .com website?
    We saw a promotion for .xyz domains on namecheap last year
    but didn
    ‘t try it out – I’m thinking of picking one up the next time it
    comes around and would appreciate any thoughts from
    a real user.

    1. The theam I use is named ‘Eportfolio’,and thanks,I wish you protect yourself,too.finally,maybe I will ask for your help when I want to change for a .com domain.

  2. I’m also writing to make you know what a excellent discovery my daughter obtained visiting your webblog. She came to understand several details, including how it is like to have a marvelous coaching mindset to let a number of people with ease understand certain problematic matters. You really exceeded my desires. Thanks for delivering these productive, healthy, revealing and also unique tips about this topic to Gloria.

发表评论

电子邮件地址不会被公开。 必填项已用*标注