njRAT is one of the free remote access trojans. This outdated access tool is still used in some cyber-attacks. This video shows you how to FUD this RAT to pass the antivirus. In short, njRAT needs a FUD crypter to make its payload fully undetectable for antivirus. So, you must know how to build the njRAT payload and make it FUD by best crypter 2023 to bypass Windows defender or another primary antivirus.
How to build njRAT payload?
We mentioned that njRAT is one of the free RAT trojans compatible with most crypter. See the best RAT for crypter for more information. To build the njRAT file, first download njRAT and follow the below instructions. We recommend reading the best remote access trojasn 2022 too.
Run the njRAT and set the port.
You must point your Host to your external IP address in case you want to use the Host or domain instead of the direct IP address.
You must open a port on your system that runs the njRAT.
So If you are using the VPS, open the port and set the rules on your firewalls. Watch port forwarding video if you don’t have any idea.
If you want to run it on your PC, you can use a VPN with custom port forwarding or open the port on your modem or router(some modems & routers haven’t port forwarding features).
Finally, your opened port needs to listen to complete this process. So You must enter opened port on njRAT to start listening.
Leave the njRAT setting and use the Data Encoder Crypter options instead.
Choose a name for it.
Before starting the encryption, test the file for a successful connection.
As you see, it is connected fine.
How to encrypt the RAT tool
Close this connection and start the crypt.
We use the Data Encoder shared STUB (Bronze Package) in this test. Add your payload and choose your injection.
If you don’t know how it works, leave it to the crypter to choose the best injection method.
We have not explained some features in this tutorial. Some users may employ these options for their goals.
Change the assembly or clone certificate to get FUD results. Note: Most detections are from assembly and icons, so use clean ones.
Clone assembly from not-popular apps is the best option.
Also, the “Compress” or “Increase File Size” option can help get FUD results.
You can Clone the certificate option too.
Choose a file name that matches the assembly.
Click on the ENCODE button on crypter and choose the right name.
Now run the encrypted file and wait for the connection.
We chose the InstallUtil injection, and your file process name will change to it. Read the crypter process hollowing and PE Injection for more details.
And finally, the encrypted njRAT payload gets a successful connection, and you make a FUD njRAT payload. You can watch the bypass Malwarebytes video to understand methods of FUD crypter too.
We recommend join our Support BOT for any problem.
Why crypter needed?
The best malware in 2022 can’t bypass antivirus lonely. Also, free remote access trojans like njRAT core detected by antivirus. So it can’t remain undetectable.
crypter as an encryption tool helps the malware encrypt the payload to bypass Windows Defender or another major antivirus. You can’t use free FUD crypter to override antivirus. To get FUD Runtime results, you need to do these:
Use updated and maintained apps.
Use clean and proper spreading methods.
Use hosts that do not distribute samples.
So buy crypter 2023 to get the latest update according to the latest antivirus detection. Otherwise, your file will be detected easily.