Hyperion-2.3.1.zip

在linux系统里可以通过Hyperion编译后可以用作加密,规避反病毒软件的检测.

#include “hyperion.h“
#include “fasmoutput.h“

//include ‘..\..\Payloads\Aes\32\aes.inc‘
//include ‘..\..\Payloads\Aes\32\aes.asm‘
//include ‘..\..\Payloads\Aes\32\decryptexecutable.asm‘

BOOL decryptAES（BOOL pe32）{
  const char* payload_directory;
  const char* container_directory;
  
  //select destination paths
  if（pe32）{
    payload_directory = PAYLOAD32_AES_DIR;
    container_directory = CONTAINER32_DIR;
  }
  else{
    payload_directory = PAYLOAD64_AES_DIR;
    container_directory = CONTAINER64_DIR;
  }

  //create file names
  char aes_inc[MAX_CHAR_SIZE];
  aes_inc[0] = 0;
  strlcat（aes_inc payload_directory MAX_CHAR_SIZE）;
  strlcat（aes_inc AES_INC_FILENAME MAX_CHAR_SIZE）;
  
  char aes_asm[MAX_CHAR_SIZE];
  aes_asm[0] = 0;
  strlcat（aes_asm payload_directory MAX_CHAR_SIZE）;
  strlcat（aes_asm AES_ASM_FILENAME MAX_CHAR_SIZE）;
  
  char decrypter_asm[MAX_CHAR_SIZE];
  decrypter_asm[0] = 0;
  strlcat（decrypter_asm payload_directory MAX_CHAR_SIZE）;
  strlcat（decrypter_asm AES_DECRYPTION_FILENAME MAX_CHAR_SIZE）;
  
  //create include file to use aes algorithm
  if（!fasmInclude（container_directory DECRYPTION_PAYLOAD_FILENAME aes_inc FALSE））
  {
          return FALSE;
  }
  if（!fasmInclude（container_directory DECRYPTION_PAYLOAD_FILENAME aes_asm TRUE））
  {
          return FALSE;
  }
  if（!fasmInclude（container_directory DECRYPTION_PAYLOAD_FILENAME decrypter_asm TRUE））
  {
          return FALSE;
  }
  
  return TRUE;
}

 属性            大小     日期    时间   名称
----------- ---------  ---------- -----  ----
     目录           0  2020-03-24 05:56  Hyperion-2.3.1\
     文件         606  2020-03-24 05:55  Hyperion-2.3.1\.gitignore
     目录           0  2020-03-24 05:55  Hyperion-2.3.1\Fasm\
     目录           0  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\
     目录           0  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\
     文件       25256  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\ADVAPI32.INC
     文件        3776  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\COMCTL32.INC
     文件        1169  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\COMDLG32.INC
     文件       16694  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\GDI32.INC
     文件       37658  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\KERNEL32.INC
     文件        5997  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\SHELL32.INC
     文件       29798  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\USER32.INC
     文件        2982  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\API\WSOCK32.INC
     目录           0  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\
     文件        2360  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\UTF8.INC
     文件        1221  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1250.INC
     文件         909  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1251.INC
     文件         719  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1252.INC
     文件         867  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1253.INC
     文件         917  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1254.INC
     文件        1170  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1255.INC
     文件        1240  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1256.INC
     文件        1200  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1257.INC
     文件        1215  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN1258.INC
     文件         663  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\ENCODING\WIN874.INC
     目录           0  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\
     文件       44470  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\COMCTL32.INC
     文件       44554  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\COMCTL64.INC
     文件        9755  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\COMDLG32.INC
     文件        8443  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\COMDLG64.INC
     文件        9017  2020-03-24 05:55  Hyperion-2.3.1\Fasm\INCLUDE\EQUATES\GDI32.INC
............此处省略107个文件信息