Locked Sharperner: generate .NET dropper with AES and XOR obfuscated shellcode

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

Sharperner

Sharperner is a tool written in CSharp that generates a .NET dropper with AES and XOR obfuscated shellcode. A generated executable can possibly bypass signature check but I can’t be sure it can bypass heuristic scanning.

Features

PE binary

    Process Hollowing
    PPID Spoofing
    Random generated AES key and iv
    Final Shellcode, Key, and IV are translated to morse code 🙂

.NET binary

    AES + XOR encrypted shellcode
    APC Process Injection (explorer.exe)
    Random function names
    Random generated AES key and iv
    Final Shellcode, Key, and IV are translated to morse code 🙂

This is the hidden content, please

• Sign In
• or
• Sign Up