The ultimate LNK packing solution.
Weaponize your payloads natively without alerts. MOTW Bypass (No Zone.Identifier), advanced cmd-to-PowerShell bridge, AES encrypted overlays, ISO/VHD/IMG packaging, and multi-level AST obfuscation.
2-Step Generation Process.
The simplest and most powerful workflow to convert any executable into an evasive LNK document.
Set your parameters
Drop any file into the Packer. Select your preferred Format (ISO, IMG, VHD, HTML Smuggling), choose the Encryption Level, and pick an Obfuscation level. You can also configure the target icon and shortcut arguments.
Get your payload
Click "Build & Download". The payload is encrypted with AES and appended to the shortcut. The result is seamlessly wrapped into your chosen container format, ready for direct delivery.
Multiple Packaging Options.
Wrap your final LNK payload inside containers to protect against MotW (Mark of the Web).
| Container | Extension | Description | MotW Bypass |
|---|---|---|---|
| ISO Image | .iso |
Standard disk image file natively supported by Windows 10/11. | Full Bypass |
| VHD Image | .vhd |
Virtual Hard Disk. Auto-mounts upon opening. | Full Bypass |
| IMG Image | .img |
Raw disk image format, functionally similar to ISO. | Full Bypass |
| HTML Smuggle | .html |
Reconstructs the ZIP or ISO entirely within the browser via JavaScript. | Evasive Delivery |
| ZIP Archive | .zip |
Standard compressed archive format for payload bundling. | Standard Delivery |
How the payload is executed.
Quima LNK Packer uses advanced native techniques to run your payload.
Multi-level Obfuscation
Choose from multiple tiers of PowerShell and command-line obfuscation ranging from L1 to FULL AST replacement.
Basic Masking
Renames standard variables while protecting environmental paths ($env:*). Perfect for simple bypasses where excessive obfuscation might trigger heuristics.
Case & Backtick
Introduces case-flipping and backtick insertion to break type literals and URL keyword masks, confusing static scanners.
String Split & AST
Splits strings and introduces junk code. AST mode intelligently replaces variable names using dictionary-based context for maximum confusion.
Ultimate Armor
Complete variable renaming, quote-to-character-array conversion, and extensive junk insertion. The ultimate protection for your AES-encrypted payload bridge.
Built for operators.
AMSI Patching
Automatically patches AMSI and ETW to blind endpoint detection before payload execution begins.
Anti-VM & Sandbox
Extensive environment checks including uptime validation, domain checks, and MAC address blacklists.
Environmental Keying
Payload only decrypts when run on a specific target domain or machine name.
Native Handoff
Clean process execution chain that avoids common parent-child relationship triggers in EDRs.
MOTW Bypass
Native encapsulation in ISO, IMG, or VHD container completely destroys the Mark-of-the-Web (No Zone.Identifier).
Self-Contained
All dependencies, decrypters, and payloads are packed inside the final LNK or ISO.
Custom Icons & Meta
Fully spoof the shortcut icon, arguments, and window styles to match legitimate software.
Simple, transparent pricing.
Weekly and Monthly plans include full panel access, unlimited generations, all container formats, and all obfuscation layers.
- Panel access
- 1 LNK Delivery
- Choose any container
- Full obfuscation
- Full panel access
- Unlimited LNK generations
- All container formats
- All obfuscation layers
- Full panel access
- Unlimited LNK generations
- All container formats
- All obfuscation layers
Quima LNK Packer Dashboard.
Clean, responsive, and built for operators.
See Quima LNK Packer in action.
A full walkthrough from uploading the payload to generating the evasive ISO delivery template.
Frequently Asked Questions.
What is the difference between Quima Builder and LNK Packer?
The LNK module in Quima Builder is designed for standard, quick payload generation and basic wrapper capabilities. Quima LNK Packer, on the other hand, is our flagship delivery tool engineered from the ground up for Red Teaming and APT simulation. It features full AES encryption (Overlay), Fileless execution, AMSI/ETW patching, AST-based polymorphic obfuscation, and bypasses MotW by packaging into containers like ISO, IMG, or HTML Smuggling.
Is the generated payload FUD (Fully Undetectable)?
Yes. The LNK Packer utilizes dynamic AST obfuscation, AMSI/ETW in-memory patching, and randomized AES encryption for each build. This ensures that every payload generated has a completely unique static and dynamic signature, effectively evading modern EDR and AV solutions.
What payment methods do you accept?
We accept cryptocurrencies to ensure privacy and security. Supported coins include Bitcoin (BTC), Monero (XMR), and Tether (USDT). Licenses are automatically provisioned upon blockchain confirmation.
Request access
Quima LNK Packer is available by request. Reach out with your use case and we'll provision an account.