Single .lnk downloader with document decoy, PowerShell hidden execution and custom icon.
lnk (+ decoy)
Clients, browser data, wallets, clipper hits, builds, remote commands, search and exports.
No hidden add-ons: the panel, Telegram bot and build history are part of every product.
Dashboard, clients, browser data, wallets, clipper hits, screenshots, commands.
Notifications and remote commands without opening the panel.
Every build stored with options, hash, size and download link.
Global search, CSV/JSON/TXT and one-click ZIP export.
Pick the product, C2, format, icon, assembly, decoy, bind, melt, UAC and anti-VM.
The builder agent compiles a unique payload, encrypts it and creates the chosen output.
The panel stores the ZIP with a manifest and a direct download link.
Watch clients, browser data and clipper hits live. Export everything when you need it.
Complete browser + wallet stealer with V20 in-memory decryption, AMSI bypass and a live web panel.
Real-time clipboard replacement for 16 chains with look-alike wallet generation and hit reports.
Upload a detected executable and get it back as a private metamorphic build.
Authenticode-signed loader pack with encrypted payload and two support files for trusted delivery.
Dependency-free JavaScript dropper with embedded payload, decoy and melt.
VBS dropper with certutil decode, embedded payload and optional decoy.
Budget semi-private stub for bulk builds. Same formats, faster queue.