Sales thread: https://hackforums.net/showthread.php?tid=4616066
Ok here is my review.
I was instructed not to leave any negative feedback or i would lose my license as soon as i bought this crypter.
I thought to myself that there must be a reason why he writes this as his first statement to me after i purchased it.
However I'm still going to give my honest opinion on this. I bought this, it took about two days before i actually got the program but okay i can live with that.
![[Image: 090bb2df18e213103503f575e1e3c8bf.png]](https://i.gyazo.com/090bb2df18e213103503f575e1e3c8bf.png)
![[Image: 7424d289f1261a078d711a7066aafb8c.png]](https://i.gyazo.com/7424d289f1261a078d711a7066aafb8c.png)
First, i thought he wrote in his thread that it was coded in C++ ?
![[Image: 546af93afb65fd9f4626a144dd2ecd0b.png]](https://i.gyazo.com/546af93afb65fd9f4626a144dd2ecd0b.png)
It's not?
![[Image: 7fbd919b7b741faeea6529725245422d.png]](https://i.gyazo.com/7fbd919b7b741faeea6529725245422d.png)
Stub size is about 408kb, stuffed with junk, clearly the one who wrote this does not know how to code a proper crypter.
After receiving it i was curious because he advertises that it "bypasses ALL" antivirus runtime so i put it to the test in my boxed environment.
Testing performed with ESET
![[Image: 5717c2f7cd258bc46e8c5cc5778b7ab9.gif]](https://i.gyazo.com/5717c2f7cd258bc46e8c5cc5778b7ab9.gif)
Testing performed with Norton
![[Image: ffcad852bd4c74198883baed0d3a0415.gif]](https://i.gyazo.com/ffcad852bd4c74198883baed0d3a0415.gif)
Testing performed with Kaspersky
![[Image: 0351ba8c63ef7c7e8d805584a97a986f.gif]](https://i.gyazo.com/0351ba8c63ef7c7e8d805584a97a986f.gif)
![[Image: c070bb058b336ee351354b07ec774862.gif]](https://i.gyazo.com/c070bb058b336ee351354b07ec774862.gif)
Testing performed with Bitdefender
![[Image: 33ab1199586642689d3743cfbcdb6ecf.gif]](https://i.gyazo.com/33ab1199586642689d3743cfbcdb6ecf.gif)
A little cute loop that counts nothing, after this a few more useless loops followed along with sleep etc... i bet this is effective against runtime antivirus(ironic).....
![[Image: 9994c6fa3cca19ff62b31f3e30635530.png]](https://i.gyazo.com/9994c6fa3cca19ff62b31f3e30635530.png)
EDIT - A few hours after i wrote this thread, the files became heavily detected obviously because the lack of runtime, even though he made it "undetected" ~14 hours ago.
![[Image: 84d192a67ad1293d327798cc8c500c0e.png]](https://i.gyazo.com/84d192a67ad1293d327798cc8c500c0e.png)
14 hours later....
![[Image: a69d02205b2ef93e0d4b2c2e704e3b39.png]](https://i.gyazo.com/a69d02205b2ef93e0d4b2c2e704e3b39.png)
I was planning on doing further analysis in ollydbg, but as it didnt succeed on even one of my tests i assume this was not even necessary.
But what I can say so far, poorly coded crypter with little to none protection against both AV and reversers.
When a crypter like this is not runtime against any of the major AV's they will all distribute the samples caught, and share them between eachother.
No wonder this crypter is fud for just a few hours.
You can gangrep me all you want, i dont care. I just feel that people should know this before they buy.
False advertising is not the way to go as a scantime only crypter can be coded FUD in C++ in less than a day.
Ok here is my review.
I was instructed not to leave any negative feedback or i would lose my license as soon as i bought this crypter.
I thought to myself that there must be a reason why he writes this as his first statement to me after i purchased it.
However I'm still going to give my honest opinion on this. I bought this, it took about two days before i actually got the program but okay i can live with that.
![[Image: 090bb2df18e213103503f575e1e3c8bf.png]](https://i.gyazo.com/090bb2df18e213103503f575e1e3c8bf.png)
![[Image: 7424d289f1261a078d711a7066aafb8c.png]](https://i.gyazo.com/7424d289f1261a078d711a7066aafb8c.png)
First, i thought he wrote in his thread that it was coded in C++ ?
![[Image: 546af93afb65fd9f4626a144dd2ecd0b.png]](https://i.gyazo.com/546af93afb65fd9f4626a144dd2ecd0b.png)
It's not?
![[Image: 7fbd919b7b741faeea6529725245422d.png]](https://i.gyazo.com/7fbd919b7b741faeea6529725245422d.png)
Stub size is about 408kb, stuffed with junk, clearly the one who wrote this does not know how to code a proper crypter.
After receiving it i was curious because he advertises that it "bypasses ALL" antivirus runtime so i put it to the test in my boxed environment.
Testing performed with ESET
![[Image: 5717c2f7cd258bc46e8c5cc5778b7ab9.gif]](https://i.gyazo.com/5717c2f7cd258bc46e8c5cc5778b7ab9.gif)
Testing performed with Norton
![[Image: ffcad852bd4c74198883baed0d3a0415.gif]](https://i.gyazo.com/ffcad852bd4c74198883baed0d3a0415.gif)
Testing performed with Kaspersky
![[Image: 0351ba8c63ef7c7e8d805584a97a986f.gif]](https://i.gyazo.com/0351ba8c63ef7c7e8d805584a97a986f.gif)
![[Image: c070bb058b336ee351354b07ec774862.gif]](https://i.gyazo.com/c070bb058b336ee351354b07ec774862.gif)
Testing performed with Bitdefender
![[Image: 33ab1199586642689d3743cfbcdb6ecf.gif]](https://i.gyazo.com/33ab1199586642689d3743cfbcdb6ecf.gif)
A little cute loop that counts nothing, after this a few more useless loops followed along with sleep etc... i bet this is effective against runtime antivirus(ironic).....
![[Image: 9994c6fa3cca19ff62b31f3e30635530.png]](https://i.gyazo.com/9994c6fa3cca19ff62b31f3e30635530.png)
EDIT - A few hours after i wrote this thread, the files became heavily detected obviously because the lack of runtime, even though he made it "undetected" ~14 hours ago.
![[Image: 84d192a67ad1293d327798cc8c500c0e.png]](https://i.gyazo.com/84d192a67ad1293d327798cc8c500c0e.png)
14 hours later....
![[Image: a69d02205b2ef93e0d4b2c2e704e3b39.png]](https://i.gyazo.com/a69d02205b2ef93e0d4b2c2e704e3b39.png)
I was planning on doing further analysis in ollydbg, but as it didnt succeed on even one of my tests i assume this was not even necessary.
But what I can say so far, poorly coded crypter with little to none protection against both AV and reversers.
When a crypter like this is not runtime against any of the major AV's they will all distribute the samples caught, and share them between eachother.
No wonder this crypter is fud for just a few hours.
You can gangrep me all you want, i dont care. I just feel that people should know this before they buy.
False advertising is not the way to go as a scantime only crypter can be coded FUD in C++ in less than a day.
