Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE

Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Cryptography, Encryption, and Decryption (https://hackforums.net/forumdisplay.php?fid=126)
+---- Thread: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE (/showthread.php?tid=6268435)

Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Hackers - Apr 13, 2024

Hello all, I decided to try out an open source crypter called Lime Crypter, that was listed as having been revamped for 2024. I can report that as-is, it is not FUD or close to it in runtime.

In scantime, we see an average of 10+ out of 40 on KS tool, and on runtime we see 45+ on VT tool.
Unfortunately this is very bad as far as scores go for data privacy & runtime protection for software like this.

Here is the GUI that Lime uses when you run it:

[Image: Screenshot-2024-04-13-112211.png]

Source Code Mirrors:

Code 
https://github.com/LNodesL/Mordecai-Lime-Crypter-Forked

https://mega.nz/file/96UVnRAb#IOcFkm0JBXOGiyChWkauSiriseT80Z8oH4A6kKgBAWQ

https://www.mediafire.com/file/kofvmr2382rgxfz/Mordecai-Lime-Crypter-Forked-main.zip/file

https://github.com/Open-Mordecai/Mordecai-Crypter

https://github.com/NYAN-x-CAT/Lime-Crypter

https://mega.nz/file/wrdExAKA#Rp0tRN9MlW7OwwZNOH1gJHa8V0zpzOUtojaYNXg6I8w

https://www.mediafire.com/file/xh1ebeht7pfjysl/Mordecai-Crypter-main.zip/file

https://github.com/Open-Mordecai/Mordecai-Crypter/blob/main/FUD-Crypter-Undetected-2024-Windows.tar.gz

One huge benefit of the source, even if not FUD is that you can build your own tools from the GUI, and change the stub as needed...

[Image: Screenshot-2024-04-13-112932.png]

[Image: Screenshot-2024-04-13-112924.png]

[Image: Screenshot-2024-04-13-112939.png]

An example of how to improve it could be to remove the Resource usage for a better method, like direct header include or raw binary data in the file.
[Image: Screenshot-2024-04-13-113031.png]

[Image: Screenshot-2024-04-13-113031.png]

Another way to improve the program would be to add compile-time encryption / runtime decryption, such as to protect the source better, like with the csharps runtime methods seen here:
[Image: Screenshot-2024-04-13-113341.png]

[Image: Screenshot-2024-04-13-113341.png]

A reference to 'Nyan' for the Nyancat runPE method is also very 'revealing' :
[Image: Screenshot-2024-04-13-113625.png]

All in all, the improvements can be made I think to improve the scores seen below. If someone spends the effort, the stub and other files can be altered to significantly improve the program in my opinion.

Trial 1 - using RegASM
Spoiler (Click to View)

Trial 2 - Using RegSvcs
Spoiler (Click to View)

Trial 3 - Bind to itself
Spoiler (Click to View)

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - PitbullT0r - Apr 15, 2024

nodes please never leave this forum!
Always high-quality post!
Thanks.

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Hackers - Apr 15, 2024

(Apr 15, 2024 02:12 PM)PitbullT0r Wrote: nodes please never leave this forum!
Always high-quality post!
Thanks.

Thanks!! that is much appreciated
I'll stay <3 and keep posting

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - DynamicW - Apr 15, 2024

That's very bad in my opinion. Lime crypter is basically a waste of time it's no use.

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Hackers - Apr 15, 2024

(Apr 15, 2024 02:38 PM)DynamicW Wrote: That's very bad in my opinion. Lime crypter is basically a waste of time it's no use.

Agreed, I went into this thinking I would post the review no matter what, but did expect better.
The codebase isn't too shabby, I think it could be fixed. It looks like the guy who said it was revamped for 2024 didn't really make changes.

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Absence - Apr 15, 2024

(Apr 15, 2024 02:39 PM)nodes Wrote: Agreed, I went into this thinking I would post the review no matter what, but did expect better.
The codebase isn't too shabby, I think it could be fixed. It looks like the guy who said it was revamped for 2024 didn't really make changes.

Yeah I think this will see very little use, however, I think you are doing a great job with analysis. Admittedly, I know little about coding crypters, but I am enjoying seeing the content you are providing. I am learning a bit on the way :)

Thanks!

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - LLynn101 - Apr 15, 2024

Hey I am new on here , and seen your post about malware, would like to talk privately. Telegram X?? [deleted] is me. [warn]

RE: Lime Crypter Review 2024 // Open Source Crypter + Nyancat runPE - Hackers - Apr 16, 2024

(Apr 15, 2024 04:47 PM)LLynn101 Wrote: Hey I am new on here , and seen your post about malware, would like to talk privately. Telegram X?? [deleted] is me. [warn]

Hi, I do not offer ANY support for malware, blackhat methods, etc. I also do not take conversations off-site if I don't know someone, and you're not allowed to ask that here. I also don't use TG, and also I'm whitehat.