Cmiami Worm Builder V1.3

6 Replies, 167 Views

Heart
(06-15-2025, 02:45 PM)Cmiami Wrote:
I disclaim any responsibility for any harmful use.
First Download Link
#lcjxk-WyCTdCNDFEKWsjBBJ9Nmd9IUyqunLMu9dVvpQ
how use it 
Download pythion and after that download pip install pyinstaller


[Image: image.png]
Graphical User Interface (GUI)
What it does: A user-friendly window to convert VBS files into EXE files.
Features:
Upload a VBS script.
Preview the code before converting.
Add extra features (like disabling antivirus, spreading over a network).
Choose a custom icon for the output EXE.
2. Anti-Analysis (Anti-Debugging & Anti-Sandbox)
What it does: Tricks security tools to avoid detection.
Checks for:
Virtual machines (like VMware, VirtualBox).
Debuggers (used by analysts to study malware).
Sandbox environments (where security tools test suspicious files).
Low system resources (common in virtual labs).
3. Polymorphic Encryption
What it does: Makes the malware look different every time it runs.
How:
Encrypts the VBS script with a random key.
Changes the encryption key on each build.
Uses XOR encryption (simple but effective).
4. Windows Defender Bypass
What it does: Turns off Windows Defender to avoid being blocked.
Methods:
Modifies registry keys (disables real-time protection).
Runs PowerShell commands to weaken security.
Hides malicious actions.
5. Extra Malware Features
What they do: Adds harmful functions to the malware.
Options:
Disable Firewall: Opens the system to attacks.
Disable UAC: Bypasses Windows security prompts.
Self-Replication: Copies itself to other folders.
Startup Persistence: Runs automatically when the PC boots.
Network Spread: Infects other computers on the same network.
SSH Spread: Uses hacked credentials to spread via SSH.
6. Obfuscation (Hiding the Code)
What it does: Makes the code hard to detect and analyze.
Techniques:
Base64 encoding (hides the real script).
Random variable names.
Fake "junk code" (to confuse analysts).
Delays execution (avoids sandbox detection).
7. EXE Conversion (PyInstaller)
What it does: Wraps the VBS script into a standalone EXE file.
How:
Uses PyInstaller (a Python tool to make EXEs).
Compresses the file with UPX (makes it smaller).
Can add a custom icon (to look legitimate).
8. Self-Destruction & Cleanup
What it does: Tries to hide traces after running.

thanks
(This post was last modified: 06-29-2025, 09:12 PM by supremegod26.)

Messages In This Thread
Cmiami Worm Builder V1.3 - by Cmiami - 06-15-2025, 02:45 PM
RE: Cmiami Worm Builder V1.3 - by vvvzeex - 06-16-2025, 11:13 PM
RE: Cmiami Worm Builder V1.3 - by dripop - 06-17-2025, 11:13 AM
RE: Cmiami Worm Builder V1.3 - by mikeoxlong777 - 06-18-2025, 12:49 AM
RE: Cmiami Worm Builder V1.3 - by Mendax - 06-23-2025, 09:16 AM
RE: Cmiami Worm Builder V1.3 - by supremegod26 - 06-29-2025, 09:10 PM
RE: Cmiami Worm Builder V1.3 - by turkcoder - 06-30-2025, 09:12 PM



Users browsing this thread: 15 Guest(s)