search

mvrozanti / RAT-via-Telegram

Windows Remote Administration Tool via Telegram
MIT License
647 stars 344 forks source link

Smaller EXE size #2

Open LearnerZone opened 7 years ago

LearnerZone commented 7 years ago

Pyinstaller makes 13mb EXE file, this is a big negative for any RAT, squeezing the file-size by removing unnecessary files would be a good upgrade.

mvrozanti commented 7 years ago

I'm having a load of trouble understanding how to actually getting pyinstaller to work now. Ritiek's version didn't need .spec files or anything. I'm gonna read up a little more...

mvrozanti commented 7 years ago

Aha. Using pyinstaller --upx-dir followed by UPX's directory managed to bring 3 MB (~20%) off the binary.

It's not much but it's something. Problem with Python is that apparently much has to go into the executable. I read about Cython which is an optimizing compiler but that would take a little longer to get going.

Is 20% better enough? Mind if I close this issue?

TPS commented 7 years ago

@LearnerZone @mvrozanti Might as well keep this around as a tracking issue that's either open all the time, or re-opened whenever a new method is proposed. Since Cython is currently in play, maybe keep open 'til determination is made re: that?

mvrozanti commented 7 years ago

@TPS There's already an issue for suggestions but I feel the executable can still be shrinked. You're right. I'll let this open until we get size even lower.

Dviros commented 7 years ago

This can be done relatively easily: Create a smaller RAT that will just infect and download the "larger" bot RAT (dropper). I will start working on it

edited: Pyinstaller combines all of the needed libraries, that's why it weighs so much. You can use this dropper, however, the size will still be 4~ mb's. https://github.com/D4Vinci/Dr0p1t-Framework

LearnerZone commented 7 years ago

@Dviros The main USP of this bot is you do not need a server (which leaves traces) so hosting less delivery of a smaller filesize should still be the first choice, also I guess you could use many other non-python droppers to achieve a very smaller filesize.