Atreus is a shellcode loader wrapper for Kratos and other Mythic payloads. Injects shellcode via Early Bird APC or thread hijacking with RC4/XOR encryption, hash-based API resolution, ntdll unhook, ETW/AMSI patching, and sandbox detection.
sudo ./mythic-cli install folder Atreus- Build Kratos with
output_format = shellcode. - Select Atreus as the wrapper for Kratos.
- Configure injection technique, target process, and evasion options.
- Deploy.