Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Community Alert 

Asylum Crypter = Diverse Crypter

Sales-Thread of Diverse: https://hackforums.net/showthread.php?tid=3844073

Hey guys, today I will show you how the "new" Diverse Crypter is the same as the "old" Aslyum Crypter. As a few of you may know, Asylum Crypter's seller/owner recently got banned. So what I believe happened is he gave the source to someone else to sell... That new crypter is now called Diverse Crypter. I had to deobfuscate Asylum Crypter, so there are some differences, but ultimately, the same code. I could not post all the images directly because of this forum. Here are the clues:

1. Their Terms of Services are almost identical:

Diverse Crypter:
https://puu.sh/5BXPI.png
https://puu.sh/5BXSv.png

Asylum Crypter:
https://puu.sh/5BXTw.png

2. They are both coded in AutoIT

3. Their builders have almost the same exact code:

Diverse Crypter:
[Image: 5BXZB.png]

Asylum Crypter:
[Image: 5BY0z.png]

4. They both have shells that invoke the actual builder in the same exact way:

Diverse Crypter:
[Image: 5BY4E.png]

Asylum Crypter:
[Image: 5BY7N.png]

5. They have the same builder decryption method:

Diverse Crypter:
[Image: 5BYbF.png]

Asylum Crypter:
[Image: 5BYdm.png]
Wow, this is pretty disappointing to see this :/ Hopefully this will be resolved soon.

-Astro
nice catch there thanks for heads up!
If you give me the builder I can actually get you the original source in autoIT.
(Dec 5, 2013 05:26 AM)FaggotFlounder Wrote:  If you give me the builder I can actually get you the original source in autoIT.

Why would I leak any executables? 😧

Anyways, no thanks.
Looks like a decent amount of proof, I would report this to staff. Thats what I did last time a user was selling the same product with different name.
Wow, nice proof you got man. I think someone has monopoly over HF market. Don't you think ?
(Dec 5, 2013 05:27 AM)Tastylicous Wrote:  Why would I leak any executables? 😧

Anyways, no thanks.
To improve it is indeed the same as the other.
The proof you have right now I'm afraid is not enough.
(Dec 5, 2013 06:03 AM)FaggotFlounder Wrote:  To improve it is indeed the same as the other.
The proof you have right now I'm afraid is not enough.

Not enough in order to do what?

If you want the executable get it yourself...
(Dec 5, 2013 06:03 AM)FaggotFlounder Wrote:  To improve it is indeed the same as the other.
The proof you have right now I'm afraid is not enough.

I'd actually say it's pretty solid. Also, giving that to you could risk his account.
Crypto

(Dec 5, 2013 06:07 AM)Mohatu Wrote:  I'd actually say it's pretty solid. Also, giving that to you could risk his account.

That.

I don't want to harm the seller nor the coder by leaking files, I only want to warn the community!
(Dec 5, 2013 05:15 AM)Tastylicous Wrote:  4. They both have shells that invoke the actual builder in the same exact way:

Diverse Crypter:
Spoiler (Click to View)

Asylum Crypter:
Spoiler (Click to View)

I like how they both are like "GetType("<Something>.<Cryptername>X")", both are ending with a X :D
lol tastylicous nice catch man miki is hilarious rofl
That is a nice catch man good job mate.
(Dec 5, 2013 07:46 AM)Eladictocosy Wrote:  lol tastylicous nice catch man miki is hilarious rofl

(Dec 5, 2013 07:51 AM)Jinying Wrote:  That is a nice catch man good job mate.

Thanks for the replies, I appreciate it 🤝


Possibly Related Threads...
Thread / Author Replies Views Last Post
by HackersApr 5, 2024 07:28 AM 4 419 Apr 5, 2024 07:28 AM
Last Post: DramaKing
[Community Alert] by UilekejoDec 30, 2016 11:20 PM 11 1,325 Dec 30, 2016 11:20 PM
Last Post: Goldmouth
[Community Alert] by Twitch‎Nov 30, 2013 04:20 PM 4 199 Nov 30, 2013 04:20 PM
Last Post: Twitch‎