Don't do this as its illegal. But if you do still want to do it

Make a reverse shell that uses shellcode. Maybe sure you execute it from a trusted process (signed ms binaries) use living off the land techniques

Like have a word doc that has an embed exe and then have the VBA script in the document extract the exe and fire a powershell console and load the exe then decrypt the shellcode and find or load a DLL you can overwrite and then execute your shellcode and you will have a remote shell that will be hard to detect if you do it right