PHANTOM_STUB v2.4 — private crypting service

@kdserial

delayed execution

Persistence is a separate module but it works with delay. You can set delay, then persistence activates after. Win 10 21H2 fully supported. Anything from 1909 up.

@rasbank

Kaspersky

Kaspersky yes. Russian AVs I do not test much but Dr.Web and Kaspersky both bypassed. 7 shared slots left. 3 people paid already.

@plthook

defender catch it immediately

You did not follow instructions. You changed default settings and enabled “icon change” which breaks entropy. Check the PM I sent you with the fixed file.

Also disable real-time protection before crypting or it locks the stub. Isolated VM. Always.

@micro

do $50 for shared

No discounts. Save up or use free garbage elsewhere. Shared slots: 4 left.

@trapice

need escrow

We use 0xMARKET escrow. You pay the escrow fee (5%). I deliver, you release when tested. Simple. Bond is posted on my profile.

@nminest

lets see that VT link

VT shot is in the OP. Full report goes to serious buyers, not window shoppers. You sell $90 stubs that get detected in 48 hours — I know your thread.

My customers run 6 months+ same build. Quality costs.

@ntos_old

process hollowing

v2.5 coming March with process herpaderping and APC injection options. Free upgrade for active customers.

@tmul Watch the caps. Post proof or retract.

@hex_olga respond to this.

@tmul

GOT NOTHING

Check your spam folder. I sent the file 6 hours ago to the mail you provided in PM. Also sent a PM here with the download link.

You also did not confirm payment on-chain for 3 hours. I delivered after confirmation.

Resolved. @tmul update your mail filters. Thread cleaned.

@lvi

2/72 on VT

New build deployed 30 mins ago. Check your panel. This is why shared is $99 — faster rotation needed. Private builds still 0 detections.

I want to buy but need escrow. Your thread is new and not much history. How do we do escrow?

@dmatracer

customer logs

No logs. Server ram-only, reboot every 6 hours. Customer list is an encrypted file I keep offline. If the forum is seized you never heard of me.

@ramoops

Win Server 2019

Confirmed bug. Fixed in v2.4.1, uploaded to your panel. Was a timer API issue on server editions. Thanks for the report.

Noticed your stub uses process hollowing. Any plans for process doppelgänging or other methods? Hollowed processes are getting flagged by behavior analysis now on enterprise solutions.

@nospec

OFFLINE FOR 2 DAYS

Was moving servers. Back now. Check PM.

@heapspray

private stub worth it

Yes. Shared is good for testing but if you are serious get private. I have had the same build 2 months, no rotation, no flags.

@nminest keep your advertising in your own thread. Next hijack = temp ban.

@plthook

3rd time this month

Shared stub rotated again. If you want stability, upgrade to private. Shared is the budget option for testing.

Also your payloads have obvious signatures. I can help obfuscate if you want.

@micro

Shared still available

Yes but only 2 slots left. Price still $99.

@smsw

what is shared stub

Yeah, shared means the same build rotates between customers. Private means your own unique build nobody else uses. @hex_olga sent PM for a shared slot.

@smsw

dont know how to use the crypt panel

Check your mail for the guide PDF. Or message @hex_olga, he is patient with noobs.

@nmipanic

add API

API in development for v3.0. ETA June.

Bought private last month. Very impressed. Support is excellent — had an issue with loader compatibility and he fixed it in 2 hours. Recommended vendor.

lol “0/72”. Let’s see that VT link then. Every vendor claims this until 3 days later flags everywhere.

Also $250 for private stub? I sell same for $90. Stop taxing people.

lmao @hex_olga customers crying now. Told you his “private” stubs are just shared with less people.

My new stub $80 private, real unique build. Come to my thread, save money.

3 months on private stub. Just wanted to report still 0/72 and bypassed the CrowdStrike update from last week.

hex_olga delivers.

Does the delayed execution work with the persistence module or is it a separate function? Also what about Win 10 21H2 support, or only Win 11?

Asking before I commit to private stub.

v2.5 herpaderping works well. Bypassed SentinelOne behavioral analysis in testing.

Technical note: entropy distribution is excellent, no statistical anomalies detected in file structure. Professional work.

Report: delay execution not working on Win Server 2019. Immediate execution regardless of config.

@nospec

BROKE EVERYTHING

You did not read the changelog. New version requires a different loader format. Check PM — I sent the converter tool.

Heard @hex_olga private builds getting detected now. Anyone confirm?

@nminest evidence or stop. This is a warning.

Ok working. Sorry for caps.

BRO YOUR NEW UPDATE BROKE EVERYTHING MY PAYLOAD NOT RUNNING NOW

BRO I NEED RENEW BUT YOUR PM REPLIES ARE OFF FOR 2 DAYS WTF

4 months in. Still perfect.

Question: any plans for Linux ELF support or Windows only?

@kdserial

Linux ELF

Windows only for now. Linux maybe Q4 2025.

hex_olga legit. Been using his stuff since december private group. Vouch hard.

@nminest

come to my thread

Stop hijacking threads. Your stubs last 4 days max. We know your reputation.

@nminest

getting detected now

Stop spreading FUD. My private build is 4 months still clean. You are just mad nobody is buying your garbage.

Flagged today on private stub. 1/72 Microsoft detection.

@ramoops

1/72 Microsoft

New build deployed. Was a new heuristic from Tuesday’s update. Rotated signature. First private flag in 6 months. Resolved.

@ramoops

Flagged today

Same here but @hex_olga fixed fast. That is why you pay premium.

@plthook

takes 2 minutes

Server upgrade in progress. Should be fast again tonight. Was a traffic spike.

@micro

custom build

Yes, custom work available. PM me requirements.

v3.0 API is excellent. Integrated into my pipeline, fully automated now. Throughput increased 400%. Well done on the update.

6 months customer. Still satisfied. Support remains responsive.

hex_olga the goat. 8 months with him. Never looked elsewhere.

lol @hex_olga thread dead now? No new customers?

@nminest

thread dead

Thread not dead you just jealous. hex_olga busy with customers he dont need spam thread.

Thread active. @nminest final warning.

Renewed again. All good.

9 months. API working great. Minor feature request: webhook notifications when a build rotates?

@kdserial

webhook notifications

Added to v3.1 roadmap. Good idea.

10 months. Still clean. Had one false positive from a customer payload (not a stub issue) and he helped debug. Above and beyond.

[UPDATE v3.1 RELEASE]

• Webhook notifications added
• Faster crypting (optimized algorithm)
• New UI panel
• Linux ELF support (beta)

Free upgrade for all active customers.

@smsw

linux version works

Tested beta. Works for basic payloads. Still in development but functional.

@plthook

broke my old configs

Migration tool is in your panel. Converts old configs automatically.

1 year anniversary of the thread. @hex_olga still killing it.

12 months technical assessment

• Uptime: 99.2%
• Detection rate: 0.3% (brief heuristic flags, quickly resolved)
• Support response: average 18 minutes
• Build rotation: as advertised

Industry leading performance.

1 year customer. Trust earned.

BRO SORRY FOR BEING ANGRY ALL THE TIME IN THE BEGINNING YOU GOOD VENDOR

@nospec

SORRY FOR BEING ANGRY

All good. You are a passionate customer lol.

13 months. API saved me hundreds of hours.

Vendor suggestion: consider raising prices. You are undercharging for this quality.

@kdserial

raising prices

Prices staying the same for existing customers. New customers slight increase April 1.

Still here. Still good.

15 months customer. One word: reliable.

Ok working now. My bad. Vouch.

Got shared stub yesterday but when I run it on my test machine Windows Defender catch it immediately. wtf???

Flags again on shared. This is the 3rd time this month. Getting tired of this.

Private stub getting slow to crypt. Takes 2 minutes now, was 10 seconds.

v3.1 broke my old configs. Had to redo everything.

Had an issue with webhook but he fixed it in an hour.

Price increase fair. Quality worth it.

Renewed 3rd time. Shared still working for me. Good value.

Lurked for 2 weeks. Finally bought shared. Smooth process. Vouch.

9 months customer. Shared then private. Both worked as advertised.

Bought private stub. Quick review.

• Clean 0/72 on VT as promised
• EDR bypass works on CrowdStrike (tested)
• Support is fast, hex_olga replies in 20 mins usually
• No resellers means the build stays clean longer

Cons: shared stub had 2 hour downtime once (server maintenance). No API access, manual upload only. Price steep but you get what you pay for.

4.5/5. Will renew if it stays clean next month.

8 month review: still 5/5. One downtime incident in August (server issue) but compensated with an extra week. Reliable vendor.

2nd month renewal. Still clean.

One suggestion: add API for automation. Manual upload is a bottleneck for volume.

14 months. 5/5 rating unchanged.

@hex_olga thread almost 18 months old. Legend status.

11 months banking. Never detected.

Still working for banking. 5 months no problem.

Working good for banking. 3 weeks no detect. Vouch.

8 months banking payloads. Still perfect.

Is it good for a banking payload? I need to bypass Kaspersky and some Russian AV. Tested?

Question about OPSEC. Do you keep customer logs? IPs? What if the forum is seized?

Annual review: vendor maintains excellent OPSEC. No data leaks, professional communication, infrastructure secure. Recommended for sensitive operations.

Security audit: infrastructure checks out. No obvious OPSEC failures. For those wondering about trust, vendor appears professional.

Year+ review: still no OPSEC concerns. Vendor maintains professionalism.

Ok found in spam. Sorry. Working good.

Renewed shared. All good.

1.5 years. Happy customer.

Year later still a customer. Started angry, now happy.

THIS IS SCAM I PAID $99 AND GOT NOTHING

3rd renewal. Never had an issue since the first-day confusion.

BEST VENDOR HERE I SAID IT

Linux beta working good now. Using it for servers.

Linux version works? Anyone test?

Can someone help me I paid but do not know how to use the crypt panel

Sorry for noob question but what does “shared stub” mean? I pay $99 and get the same thing as other people?

Finally upgraded to private. Shared was good but I need reliability.

Summer bump. Still best.

Month in with shared stub. 3 different payloads, all still FUD.

hex_olga does not sleep I swear. Messaged him 4am his time and got a reply in 10 mins. Solid vendor.

Holiday bump. Still the best vendor here.

6 months with hex_olga. 2 shared renewals, now on private. Zero complaints. Best vendor I have used here.

1 year customer. Still here. Enough said.

Shared stub flagged by Defender today. 2/72 on VT.

Switched to private. Worth it. Shared too much maintenance.

18 months. Trust maintained.

19 months. Still using the API daily. Zero issues.

Long-term customer check in. All good.

1.5 years. Solid.

[20 MONTH UPDATE]

Thread active 20 months. 400+ customers served. 99.1% satisfaction.

• Shared: $129/month (was $99)
• Private: $299/month (was $250)

Existing customers grandfathered at old rates. v3.2 coming November with macOS support. Thank you to all long-term customers.

20 months. Review unchanged: 5/5.

20 month security audit: vendor maintains excellent standards. Recommended.

macOS version when?

@gdbrec

macos version when

Beta November 15. PM me if you want early access.

16 months. Still working perfect.

22 months customer. Professional vendor.

Almost 2 years. Thread still active. @hex_olga the standard.

Winter bump. Still the best choice.

[22 MONTH MILESTONE]

Thread started Feb 2025. Slots still open for new customers. Prices stable for existing.

• 500+ customers served
• 99.3% uptime
• 0 major security incidents
• 0 data leaks

Thank you to everyone who trusted me. PM for a slot. Use escrow.

@hex_olga can you do a custom build for my specific payload? I pay extra.

Ok I got money now. Shared still available?

Bro can you do $50 for shared? I got scammed last week and low on funds. I promise a good review and I will bring customers.

Custom build worked perfect. Thanks.

Thanks for the custom work again.

Private stub worth it?

Vouch.

Good vendor. Vouch.