[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]  vx-underground [@vxunderground](/creator/twitter/vxunderground) on x 361.6K followers Created: 2025-07-09 10:37:40 UTC I was writing a "server side" polymorphic mutator for malware. The concept is generating a pseudo-random array of instructions then subsequently inserting the instructions programmatically into areas of the source solution during the compilation process. The final result post-compilation would be a completely "unique" malicious payload. The payload should function the same, but the mutator would introduce additional (and unnecessary) instructions which would frustrate malware reverse engineers (ideally, it would initially but they'd get over it). You can't strip the polymorphic* My solution was using D.H. Lehmer's 1948 "uniform" random number generator with a seed being the current tick count (64bit). Using a randomly generated number, a random number of structures would be allocated which house "random" arithmetic operations. Each "random" arithmetic operation would also be the result of the implementation described above. In other words, pseudo-random array of pseudo-random arithmetic operators on pseudo-random integers. Further complexity would be introduced by inserting conditional statements or loop constructs. Slipping this during the compilation process would be based on identification of ";"'s, and (trying) to intelligently identify "critical" locations where this sort of convolution would be of value. Anyway, I was locked in and working on it. Then my newborn son began screaming, shit his pants, and it exploded out his diaper. That was like, a week ago, or something. I haven't been able to return to the project since. He destroyed my will. Thanks for coming to my Ted Talk. Maybe someone here will do it XXXXXX engagements  **Related Topics** [$arry](/topic/$arry) [Post Link](https://x.com/vxunderground/status/1942895923375350047)
[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]
vx-underground @vxunderground on x 361.6K followers
Created: 2025-07-09 10:37:40 UTC
I was writing a "server side" polymorphic mutator for malware.
The concept is generating a pseudo-random array of instructions then subsequently inserting the instructions programmatically into areas of the source solution during the compilation process.
The final result post-compilation would be a completely "unique" malicious payload. The payload should function the same, but the mutator would introduce additional (and unnecessary) instructions which would frustrate malware reverse engineers (ideally, it would initially but they'd get over it). You can't strip the polymorphic*
My solution was using D.H. Lehmer's 1948 "uniform" random number generator with a seed being the current tick count (64bit). Using a randomly generated number, a random number of structures would be allocated which house "random" arithmetic operations. Each "random" arithmetic operation would also be the result of the implementation described above. In other words, pseudo-random array of pseudo-random arithmetic operators on pseudo-random integers. Further complexity would be introduced by inserting conditional statements or loop constructs.
Slipping this during the compilation process would be based on identification of ";"'s, and (trying) to intelligently identify "critical" locations where this sort of convolution would be of value.
Anyway, I was locked in and working on it. Then my newborn son began screaming, shit his pants, and it exploded out his diaper. That was like, a week ago, or something. I haven't been able to return to the project since. He destroyed my will.
Thanks for coming to my Ted Talk. Maybe someone here will do it
XXXXXX engagements
Related Topics $arry