+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Rata Protector Crypter - REAL REVIEW! (/showthread.php?tid=5502636)
Rata Protector Crypter - REAL REVIEW! - DiarrheaProliv - Dec 23, 2016
[align=center]Here is a REAL REVIEW about RataProtector crypter...
This crypter not working at all, also Rata protector is NOT FUD!!!
ESET NOD 32 catch it as Trojan.MSIL/Kryptic HYJ - a variant of MSIL/Injector.QYD
It has been detected almost by all major av!
Be careful, the owner and his freinds post FAKE SCANS and FAKE VOUCHES in official thread!
Here is VIDEO PROOF
* - Codefuser - Dec 23, 2016
1. You are enabling all of those disablers and you expect it to be runtime FUD?
2. Those are gen detections.
3. Do you even have any idea what you are doing?
* - SIM-2053312 - Dec 23, 2016
(Dec 23, 2016 07:48 PM)DiarrheaProliv Wrote:Here is a REAL REVIEW about RataProtector crypter...
This crypter not working at all, also Rata protector is NOT FUD!!!
ESET NOD 32 catch it as Trojan.MSIL/Kryptic HYJ - a variant of MSIL/Injector.QYD
It has been detected almost by all major av!
Be careful, the owner and his freinds post FAKE SCANS and FAKE VOUCHES in official thread!
Here is VIDEO PROOF
Try changing icon and assembly. Also only enable what you really need in the crypter.
* - DiarrheaProliv - Dec 23, 2016
(Dec 23, 2016 08:14 PM)Chef Curry Wrote: Try changing icon and assembly. Also only enable what you really need in the crypter.
Tired, but again NOT FUD. 🤨
(Dec 23, 2016 08:09 PM)Codefuser Wrote: 1. You are enabling all of those disablers and you expect it to be runtime FUD?
2. Those are gen detections.
3. Do you even have any idea what you are doing?
1. If Crypter is good then it will be FUD!
2. NO! MSIL.Injector and Kryptic is NOT Generic!
3. Yes of course
P.S. Enjoy! 🤝
* - Glyco - Dec 23, 2016
OP those are called false detections they're not caused by the crypter, but your current assembly and Icon. If you'd like I can help you get a FUD stub.
* - testpen101 - Dec 23, 2016
I like how you botted 9 likes and say the owner of the Crypter bots his vouches looks like both of you got something in common.
* - Zexus99 - Dec 23, 2016
I only saw ESET, that is normal from a public crypter.
All others detections are not from the crypter but from the icon / assembly, just change it and you'll get 1 / 35.
You can't have 0 detection with a public crypter, you just can't.
* - Twistd - Dec 23, 2016
OP you're like a fucking disease to this forum. Please just fuck off and leave with your 5 multis.
(Dec 23, 2016 10:07 PM)Glyco Wrote: OP those are called false detections they're not caused by the crypter, but your current assembly and Icon. If you'd like I can help you get a FUD stub.
Dead wrong! Of course it's not a false positive? How can you even call it a false positive? I'm amazed. Of course they are created by the crypter, it's a generic behavior (heuristic) detection. Change the codeflow or resources a little and it will be good to go. Just stop being a jackass giving it false positive name.
* - Glyco - Dec 23, 2016
(Dec 23, 2016 11:21 PM)Twistd Wrote: OP you're like a fucking disease to this forum. Please just fuck off and leave with your 5 multis.I am pretty sure half of those detection can be removed with a HQ icon and assembly.
Dead wrong! Of course it's not a false positive? How can you even call it a false positive? I'm amazed. Of course they are created by the crypter, it's a generic behavior (heuristic) detection. Change the codeflow or resources a little and it will be good to go. Just stop being a jackass giving it false positive name.
* - Codefuser - Dec 24, 2016
(Dec 23, 2016 11:48 PM)Glyco Wrote: I am pretty sure half of those detection can be removed with a HQ icon and assembly.
Doesn't mean it is not a code detection.
* - Glyco - Dec 24, 2016
(Dec 24, 2016 12:00 AM)Codefuser Wrote: Doesn't mean it is not a code detection.Well obviously no one is denying is denying its a code detection or not, I am just pointing out the obvious that it pertinently has a little bit to do with the icon and assembly.
* - Zenonisbest - Dec 24, 2016
me and my friend are bought this crypter recently, and indeed it's a really big piece of shit and he's never fud!
this is a scan of crypted njrat(not spreaded) since this morning:
1) with icon from crypter: https : // www .ziscan. com/result.php?scan=14825634007324
2) without any icon: https : // www .ziscan. com/result.php?scan=14825622522110
total waste of my money for this crypter!
* - ©Ratatouille™ - Dec 24, 2016
hahahahhahaha noooooob
you very retarded
* - Shanonnn - Dec 24, 2016
OP is just jealous bcz Rata gets more sales ( ͡° ͜ʖ ͡° ) ( ͡° ͜ʖ ͡° )
"TheOldPhantom" is one big shitty form with checkboxes and buttons which do absolutely nothing.
And OP does not know what Gen detections are...
https://i.imgur.com/WG3ZDps.png
* - tibijczyk - Dec 24, 2016
imgur / a/lZcbi this crypter doesent work...