01-07-26, 07:10 AM
PRIVATE CODED AZALEA RAT ROOTKIT
Advanced remote admin / C2 tool with many unique features and a clean modern UI
Full offline activation supported - Get a true lifetime license
Undetected by Windows Defender & other top AV/EDR products
Kleenscan static: https://www.kleenscan.biz/scan_result/99...6f698f37af
Kleenscan runtime: https://www.kleenscan.biz/runtime/scan_r...1362785052
Purchase available on https://t.me/AzaleaDeveloper with BTC, XMR, USDT, ETH, LTC, SOL, BNB, USDC, and more.
Message for payment with any other commonly used cryptocurrency.
The admin UI runs on Windows while the external server component runs on Windows & Linux.
One license gives you access to the admin UI on one computer, while the external server component has no limits.
Reverse engineering, decompilation, or bypassing licensing is prohibited.
Do not upload samples to VirusTotal, Any.Run, or any public sandbox.
If you need to use the admin UI on more than one machine, want to do an offline activation, or have any custom requests, feel free to contact me.
Contact:
Telegram: https://t.me/AzaleaDeveloper![[Image: wiggle.gif]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fstatic.cracked.st%2Fimages%2Fsmilies%2Fwiggle.gif)
- HVNC - Uses unique technique to achieve near 60 FPS on good hardware - Support for latest Chrome, Firefox, Opera, and others
- HRDP - Supports creating hidden sessions & allows hijacking any user sessions including locked ones and bypassing the lockscreen
- Stealer - Full Chrome v20 bypass + Windows credentials dumping: SAM, Credential Manager, DCSync, Login Prompt Phishing, ...
- Windows Defender Disabler - Silently disables Windows Defender without alerting user - Full Tamper Protection bypass
- Rootkit - Ring3 rootkit coded from scratch in C++ - Hides the agent file and process + protects against termination - Not based on anything public
- Multiple payloads - Output support for ClickFix/Win+R, .lnk, .bat, shellcode, .dll, .vbs, ...
- Windows Event Log hook - Blocks events from reaching Windows Event Log based on keywords, supports events generated by Sysmon
- Windows forensics logs wiping - Wipes recently access file, event, process execution, and various other logs
- Interesting Files Finder - Searches for files including financial & corporate documents, database files, virtual disks, etc. locally and in a network
- Privilege escalation - Multiple techniques, including searching for configuration issues leading to exploitation
- Active Directory & local network enumeration - Includes network shares on computers, as well as computer info like name, domain, OS version
- Indirect syscalls - Used to bypass AV/EDR product detections at runtime
- Defence Analysis - Detection of TLS MITM/TLS decrypting firewall, running AV/EDR products, injected modules including EDR hooks and rootkits
- Teamserver - Run external server similar to CobaltStrike and other C2 frameworks - No HWID/license checks for teamserver, deploy as many as needed
Undetected by Windows Defender & other top AV/EDR products
Kleenscan static: https://www.kleenscan.biz/scan_result/99...6f698f37af
Kleenscan runtime: https://www.kleenscan.biz/runtime/scan_r...1362785052
Purchase available on https://t.me/AzaleaDeveloper with BTC, XMR, USDT, ETH, LTC, SOL, BNB, USDC, and more.
Message for payment with any other commonly used cryptocurrency.
The admin UI runs on Windows while the external server component runs on Windows & Linux.
One license gives you access to the admin UI on one computer, while the external server component has no limits.
Reverse engineering, decompilation, or bypassing licensing is prohibited.
Do not upload samples to VirusTotal, Any.Run, or any public sandbox.
If you need to use the admin UI on more than one machine, want to do an offline activation, or have any custom requests, feel free to contact me.
Contact:
Telegram: https://t.me/AzaleaDeveloper