# The art of malware - Part 0 (1)
Hello all I am going to make this a series on how to create modern malware starting from the coding all way to actually spreading it. When I say malware I refer to a computer program that receives com

var unreadAlerts = '1';
Welcome back, purely_cabbage. You last visited: Today, 06:36 AM Log Out
You have one unread private message from dkota titled Welcome to the Forum!
New Reply

Threaded Mode The art of malware - Part 0

prince97
Administrator
Posts:
145
Threads:
36
Joined:
Feb 2023
Reputation:
49
Credits: 25.6€ [Donate]
View All
#1
02-22-2023, 02:50 AM
Hello all I am going to make this a series on how to create modern malware starting from the coding all way to actually spreading it.
When I say malware I refer to a computer program that receives commands and does something with the received commands on predefined actions.
The series will talk about how to create a general malware, not a RAT/Botnet. Generally modern malware in this day and age always has 3 main functions, those are: download files, upload files and execute shell commands.
With that simple combination of functions your malware can achieve pretty much everything you want it to do, this includes updating, dropping extra malware, downloading sensitive files, obtaining a reverse shell, etc,...
Now you could argue that you can download and upload files using only shell commands and that is true but not recommended for your malware because it requires your malware dropping a shell every time it needs to download/upload files which can help AV companies to detect it
The language that I will use in this series will mostly be pseudo C code, I assume you have basic prior knowledge of programming.
[Part 0] - [Choosing the right programming language]
When choosing what programming language to write your malware in, it's always best to do extensive research regarding each and every little detail about the said language.
This includes basic things such as whether or not the language is a compiled or interpreted, language garbage collection and runtime details, how common malware is written in the said language, etc,...
And more hidden information such as whether or not compiled binaries require C++ VCRUNTIME to be installed on the system, which operating systems does the language officially support (and unofficially support), which systems include the required packages by default to run scripts (if the language is interpreted), etc,...
After you have extensively researched the desired language you want to use, it's best to gather experience with it by writing various simple programs to test it's features and it's limitations, I do have a list of things you should attempt to create, those are:
Create a calculator
Creating a calculator is an easy but powerful way to test the language you're dealing with, some interpreted language support the `eval()` keyword that allows code to be elevated and ran on the fly, and that can be used to create a simple, albeit dangerous calculator.
If you language supports `eval()` then it will come in handy if you want to create plugins for your malware without dropping additional files, if your language does not support it then no worries, there are other ways to create plugins without `eval()`, albeit they require more work.
.
Create a simple HTTP server
Creating a server in the language you've chosen is important to test the language limitation with multi-threading and general performance of the language with handling requests and such
Since your malware has to communicate with the internet in order to receive commands, best to ensure the chosen language is capable of handling and sending traffic and has mature and tested libraries for that purpose.
.
There are more example projects you can do in your language of choice to test it's capabilities and limitations, those were just some examples.
If you have reached and finished this part, congratulations! You now know a thing or two about how to pick the right language for your malware as well as how to test if the language is "malware worthy"
.
Wait until next part where we will continue on our journey, I will edit this thread with link once released.
If you have any questions, please PM dkota
PM Rate
envoy1
Newbie
Posts:
6
Threads:
0
Joined:
Mar 2023
Reputation:
0
Credits: 5€ [Donate]
#2
03-01-2023, 08:19 AM

> prince97 Wrote: Hello all I am going to make this a series on how to create modern malware starting from the coding all way to actually spreading it.
> When I say malware I refer to a computer program that receives commands and does something with the received commands on predefined actions.
> The series will talk about how to create a general malware, not a RAT/Botnet. Generally modern malware in this day and age always has 3 main functions, those are: download files, upload files and execute shell commands.
> With that simple combination of functions your malware can achieve pretty much everything you want it to do, this includes updating, dropping extra malware, downloading sensitive files, obtaining a reverse shell, etc,...
> Now you could argue that you can download and upload files using only shell commands and that is true but not recommended for your malware because it requires your malware dropping a shell every time it needs to download/upload files which can help AV companies to detect it
> The language that I will use in this series will mostly be pseudo C code, I assume you have basic prior knowledge of programming.
> [Part 0] - [Choosing the right programming language]
> When choosing what programming language to write your malware in, it's always best to do extensive research regarding each and every little detail about the said language.
> This includes basic things such as whether or not the language is a compiled or interpreted, language garbage collection and runtime details, how common malware is written in the said language, etc,...
> And more hidden information such as whether or not compiled binaries require C++ VCRUNTIME to be installed on the system, which operating systems does the language officially support (and unofficially support), which systems include the required packages by default to run scripts (if the language is interpreted), etc,...
> After you have extensively researched the desired language you want to use, it's best to gather experience with it by writing various simple programs to test it's features and it's limitations, I do have a list of things you should attempt to create, those are:
> Create a calculator
> Creating a calculator is an easy but powerful way to test the language you're dealing with, some interpreted language support the `eval()` keyword that allows code to be elevated and ran on the fly, and that can be used to create a simple, albeit dangerous calculator.
> If you language supports `eval()` then it will come in handy if you want to create plugins for your malware without dropping additional files, if your language does not support it then no worries, there are other ways to create plugins without `eval()`, albeit they require more work.
> .
> Create a simple HTTP server
> Creating a server in the language you've chosen is important to test the language limitation with multi-threading and general performance of the language with handling requests and such
> Since your malware has to communicate with the internet in order to receive commands, best to ensure the chosen language is capable of handling and sending traffic and has mature and tested libraries for that purpose.
> .
> There are more example projects you can do in your language of choice to test it's capabilities and limitations, those were just some examples.
> If you have reached and finished this part, congratulations! You now know a thing or two about how to pick the right language for your malware as well as how to test if the language is "malware worthy"
> .
> Wait until next part where we will continue on our journey, I will edit this thread with link once released.

i'm wondering what malware you have developed for yourself.
PM Rate
Reply Quote // Report
dark_lord
Newbie
Posts:
2
Threads:
0
Joined:
Apr 2023
Reputation:
0
Credits: 5€ [Donate]
#3
04-01-2023, 02:44 AM
please what's next?
PM Rate
Reply Quote // Report
EnvoyJazz
Newbie
Posts:
1
Threads:
0
Joined:
Apr 2023
Reputation:
0
Credits: 5€ [Donate]
#4
04-14-2023, 10:22 AM
It's April now, where's the next part, I'm looking forward to it
PM Rate
Reply Quote // Report

« Next Oldest | Next Newest »

New Reply

Quick Reply
Message Type your reply to this message here. Signature Disable Smilies | You have selected one or more posts to quote. Quote these posts now or deselect them.

Possibly Related Threads…
Thread | Author | Replies | Views | Last Post
| How to spread malware? | nullcat | 7 | 157 | 06-15-2023, 03:40 AM Last Post: cyberiagu
| Malware & Tool creation service | DerRoteMilan | 0 | 54 | 06-06-2023, 02:17 AM Last Post: DerRoteMilan
| whoami 'malware' | malware | 0 | 82 | 06-01-2023, 04:06 AM Last Post: malware
| [PoC] Doing malware self-destruction elegantly | KIARA | 2 | 147 | 05-31-2023, 09:54 AM Last Post: dkota
| Cookie Malware | !67zIU | 4 | 212 | 05-28-2023, 11:16 AM Last Post: 167zIU

- Subscribe to this thread

Users browsing this thread: purely_cabbage
var thread_deleted = "0"; if(thread_deleted == "1") { $("#quick_reply_form, .new_reply_button, .thread_tools, .inline_rating").hide(); $("#moderator_options_selector option.option_mirage").attr("disabled","disabled"); }