Oct 22, 2018 10:21 AM
(This post was last modified: Jan 16, 2019 01:33 PM by Stability..)
NightCrypt
A crypter with a stub coded in C/ASM
Features:
• Native stub. That means compatibility all the way from Windows XP to Windows 10 (Server editions included)
• Important APIs are called via direct syscalls. Syscall IDs are read from a mapped copy of ntdll.
• Unhooking of ntdll usermode hooks to help with runtime-detected payloads
• Unicode Support
• RunPE (Kind of) and LoadPE
• Startup
• Private Stubs
Compatibility:
Majority of native files. Not compatible with .NET
Screenshots:
Spoiler (Click to View)
Spoiler (Click to View)
Spoiler (Click to View)
Runtime Videos (All done with Startup enabled):
Spoiler (Click to View)
Pricing:
$300 - 3 stubs/1 month
$450 - 5 stubs/1 month
Purchase:
Contact us on jabber if you'd like to buy. (OTR REQUIRED)
Spoiler (Click to View)
If you're having trouble contacting us on jabber feel free to PM us here. Just be aware that we are on Jabber much more frequently than HF, so if you want the fastest reply Jabber is the way to go.
Terms of Service:
• Sharing stubs, crypter files or account information is disallowed
• In the off-chance you do encounter a problem, please contact our support - but don't expect an things to be fixed instantly. We are only human, so don't behave like an asshole.
Runtime Scan:
https://dyncheck.com/scan/id/2bf517d6cda...f5c6e3926b (Scan done with old Netwire Trial)


![[Image: ed05x4c.png]](https://i.imgur.com/ed05x4c.png)
![[Image: rCVRvo9.png]](https://i.imgur.com/rCVRvo9.png)
![[Image: zFhVlFG.png]](https://i.imgur.com/zFhVlFG.png)
![[Image: cYyztuT.png]](https://i.ipixls.net/cYyztuT.png)
