thenewattacker64 / theattacker-crypter

Tool to evade Antivirus With Different Techniques

Theattacker-Crypter

Tool to evade Antivirus With Different Techniques

DO NOT UPLOAD TO VIRUSTOTAL!!!

  VirusTotal cooperates with many antiviruses and shares its up-to-date database.
  In order for this crypter to work for a longer time, you must follow this simple rule.

Screenshot

Updates

• Added AMSI Bypass
• Added RUNPE
• Added support for 32 bit injection
• Added support for 64 bit injection
• Ability to clone Assembly
• Ability to execute your own Encoded Powershell Commands
• Ability to Disable Amsi even if you are not injecting .Net Paylaod
• Ability to choose Payload type if it Native or .Net
• Added New injection Paths
• Notify When stub Executed on Macihne 2 Methods Impelmented
  1. using Telegrem
  2. using Socket TCP/IP server
• Fixed SomeBugs
• New Ui
• Mutex to prevent the process from running Multiple times
• Simple .Net Obfuscator
• Melt Function for the exe to Delete it self after injecting the payload
• File Pumper
• Anti VM Payload won t execute in Vms
• current last version

poc

AntiVmExample

Usage

1. Download Crypter from Releases
2. choose File and Generate Encryption Key
3. Upload Loader.txt in raw url Ex(pasteBin)
4. put the url in the build Section and Build

Detection rate

I don t know how much This will stay FUD but will be updating it always and adding New Injection and new Attacks to it

HINT

Simple Note to avoid Detection Completely Use .NET obfuscator like Smart Assembly

YT-VID

https://www.youtube.com/watch?v=caev1GH8PzE

TODO

• Add Ability To execute your own powershell code
• option To Disable Amsi from powershell
• Notify Methods When Code executing on Machine
• Mutex to prevent Porcess from running Multiple times
• Delete it self
• File-Pumper
• Anti-VM
• Undetected Binder
• HTTP Server for Delivering Payloads
• Loading Payload locally instead of loading our shellcode from url
• adding Different Encryption Methods
• Linux Support

Support

Star this Repo if you like the tool

theattacker-crypter's Issues

Question

I have a problem, how can I contact you? THANK YOU

Where is Pastebin located?

Sorry for the stupid newbie question. Where is Pastebin located? Please show it in the picture.

Issue with Pastebin

Hello I'm having issues uploading the loader.txt to pastebin!
the file is about 47mb big and because of that I get a 413 error when trying to upload it.
Did I do something wrong? I just opended the txt doc and copied all.
Please help

Pastebin does not work over 512kb

Hello
i tried pastebin and it does not work, i exceeded the quota, i tried my own server where i paste it in .txt file does not work.

any ideas how to proceed?

When I press the "Encrypt" button, it is not encrypted.

It says "Copy the content of loader.txt and paste it in pastebin then copy the raw URL and paste it into Builder Area". I am doing what is said.

I select everything written in the loader.txt file with CTRL+A, copy and paste it into pastebin. Then I press the "raw" tab, copy the URL and paste it into the "Builder Area". So what should I do next? I get the same warning when I say "Encrypt".

Please add custom stub

It could be epic if we can have a custom stub option.
IDK if this program has a backdoor I don't fully trust it, but that's great work.
What's the builder area btw... Because for the moment the injecter can only do every option mentioned but where is the payload BEFORE the injection?

I'd suggest craxtube for the vids before it keeps taken down

Problem with Loader.txt

when i paste all the data of loader.txt the pastebin gives an error "out of memory"
how to fix that

Perfect crypter

Keep up the good work and update it please,

It works perfect with .net payloads

Pasting url in builder impossible.

the text file is so large i can't copy and paste it into pastebin with out pastebin crashing.

loader.txt too big for pastebin

When I copy the content of loader.txt to pastebin. I got the error that it is too big for pastebin.

What you need to enter into the Builder Are

Writes that you need to insert a link from github loader.txt . Where can I get it?