Dcrat AV Evasion

  • This page will document different payloads and their success against different AV engines

  • X == Detection, do not run on a remote host

  • Yes == No detection, safe to run on a remote host

AV EngineShellcode LoaderBinary

Windows Defender

Yes

X

Kaspersky

McAfee

Sophos

Malwarebytes

Custom Shellcode Loader

  • I am currently working on a custom shellcode loader for Dcrat shellcode.

  • This is written in C# like the RAT itself.

Current Detections

Last updated