[pilootman]

Hello Hackforums,

I'm releasing a Scantime Crypter, made by me - aka Mr.FoX

It works with RATs, keyloggers and much more, tested on darkcomet and DDoSeR.

A picture of the builder.

[img]http://img546.imageshack.us/img546/2493/cryptah.jpg[/img]

Scan results of the builder:

Scan Results
Filename : FoXeS.exe
Filesize : 425.53 KB
File Detection Rate : 1

AVG : Clean
AhnLab-V3 : Clean
AntiVir : Clean
Antiy-AVL : Clean
Avast : Clean
BitDefender : Clean
ByteHero : Clean
CAT-QuickHeal : Clean
ClamAV : Clean
Commtouch : Clean
Comodo : Clean
DrWeb : Clean
Emsisoft : Clean
F-Prot : Clean
F-Secure : Clean
Fortinet : Clean
GData : Clean
Ikarus : Clean
Jiangmin : Clean
K7AntiVirus : Clean
Kaspersky : Clean
McAfee : Clean
McAfee-GW-Edition : Clean
Microsoft : Clean
NOD32 : probably a variant of MSIL/TrojanDropper.Agent.BS
Norman : Clean
PCTools : Clean
Panda : Clean
Prevx : Clean
Rising : Clean
SUPERAntiSpyware : Clean
Sophos : Clean
Symantec : Clean
TheHacker : Clean
TrendMicro : Clean
TrendMicro-HouseCall : Clean
VBA32 : Clean
VIPRE : Clean
ViRobot : Clean
VirusBuster : Clean
eSafe : Clean
eTrust-Vet : Clean
nProtect : Clean

Download Link
http://www.2shared.com/file/rved7APU/FoXeS.html

*EDIT
Sorry first password DID actually fail, cause I forgot 1 thing, updated now working :D

Password: kw=ujcDOnuuujti7g/XgcIjAbZ/xcJ=0kwfunxnAS2CwSK4unIKJob55

Password Encrypted>HAZZ-15>BASE-64>TIGO-3FX>MEGAN-35

Have Fun 🤝

and don't forget, NEVER scan on virustotal!! 😖

[mortal]

thanx m going to download it :D thanx ..

[androdox]

I don't get it, I can't decrypt the password. I tried to decrypt the encrypted pass first with Reverse, which looked okay, but after a time I just go errors, cause it just showed some piece of sh** letters. Then I tried to decrypt the thing at first with HAZZ-15, which looked instantly like a piece of cr*p.

Can you send me the direct password, please? :I

[pilootman]

I don't get it, I can't decrypt the password. I tried to decrypt the encrypted pass first with Reverse, which looked okay, but after a time I just go errors, cause it just showed some piece of sh** letters. Then I tried to decrypt the thing at first with HAZZ-15, which looked instantly like a piece of cr*p.

Can you send me the direct password, please? :I

Sorry, first password went wrong, this one works 100%

Password: kw=ujcDOnuuujti7g/XgcIjAbZ/xcJ=0kwfunxnAS2CwSK4unIKJob55

Decrypt it this way: MEGAN-35>TIGO-3FX>BASE-64>HAZZ-15

Have Fun 😉

[androdox]

so, first decrypt megan-35 or hazz-15? xD

Wayne, I try it out. Thanks

/e: Have it. Try it out now & give a feedback, thank you.

/e: File information
Report date: 2011-12-06 16:35:56 (GMT 1)
File name: servercrypted-exe
File size: 628745 bytes
MD5 hash: bbe7e93ce9cc5139a737f4a89a6a5926
SHA1 hash: 033e979d73d4c3da6c3489ec00070d29e1a5fdec
Detection rate: 1 on 9 (11%)
Status: INFECTED

Antivirus Database Engine Result
Avast 06/12/2011 5.0
AVG 06/12/2011 10.0.0.1190
Avira AntiVir 06/12/2011 7.11.7.12 TR/Dropper.Gen
ClamAV 06/12/2011 0.97
Comodo 06/12/2011 4.0
Emsisoft 06/12/2011 5.1.0.3
F-Prot 06/12/2011 6.3.3.4884
Ikarus 06/12/2011 T31001097
TrendMicro 06/12/2011 9.200.0.1012

tested it on istealer. Anyway, better than 9/9. Thanks

[pilootman]

so, first decrypt megan-35 or hazz-15? xD

Wayne, I try it out. Thanks

/e: Have it. Try it out now & give a feedback, thank you.

/e: File information
Report date: 2011-12-06 16:35:56 (GMT 1)
File name: servercrypted-exe
File size: 628745 bytes
MD5 hash: bbe7e93ce9cc5139a737f4a89a6a5926
SHA1 hash: 033e979d73d4c3da6c3489ec00070d29e1a5fdec
Detection rate: 1 on 9 (11%)
Status: INFECTED

Antivirus Database Engine Result
Avast 06/12/2011 5.0
AVG 06/12/2011 10.0.0.1190
Avira AntiVir 06/12/2011 7.11.7.12 TR/Dropper.Gen
ClamAV 06/12/2011 0.97
Comodo 06/12/2011 4.0
Emsisoft 06/12/2011 5.1.0.3
F-Prot 06/12/2011 6.3.3.4884
Ikarus 06/12/2011 T31001097
TrendMicro 06/12/2011 9.200.0.1012

tested it on istealer. Anyway, better than 9/9. Thanks

Np, hmm Avira being a b*tch again today 🎉

[androdox]

Haha. From where do you have the 0/44? I just know vscan.novirusthanks.org and virustotal.com, which I don't use.

What do you used for the X/44 result?

[pilootman]

Haha. From where do you have the 0/44? I just know vscan.novirusthanks.org and virustotal.com, which I don't use.

What do you used for the X/44 result?

A secret scanner hehe.. it's better then My-AVScan, and it's free ^^
It also got a Do not distribute option :D

[sk8r]

shit, i cant decrypt this password, decrypters sayin wrong code

[Dwayne Johnson]

Great crypter thanks for this!
my file is UD, the only AV that detects it is AntiVir.
heres my results:
http://synfyre.net/scan/c2993050cee13677...16b1a733ae

Thanks again!

[tedbaker]

What program do I use to decrypt? Help!

[pilootman]

Great crypter thanks for this!
my file is UD, the only AV that detects it is AntiVir.
heres my results:
http://synfyre.net/scan/c2993050cee13677...16b1a733ae

Thanks again!

Np, have fun with my crypter bro 👍

[Neel]

Thanks for the crypter. It's UD 🤝

[xmoi]

does it work with istealer ?
Thank you for your crypter

[pilootman]

does it work with istealer ?
Thank you for your crypter

Yes it works with iStealer, you can try it out by running your keylogger in sanboxie 😉