PureCrypter
Key Features
- GUI available in English, Chinese, and Russian
- Ring3 Bypass
- Stub coded in .NET
- Automatic stub check every 4 hours
- Auto REFUD if stub has 2 or more detections
Input Payload
- Select file: Load from disk or URL
- Architecture: 32-bit or 64-bit injection
- Injection modes: RunPE, Shellcode, .NET reflection
Payload Behavior
- Execution delay
- Loader modes: cPanel, Manual
- Single instance execution
- Advanced runtime options
- DLL unhooking
- Patch ETW
- Windows Defender AMSI patch
- Windows Defender exclusion
- Anti-virtual machines and anti-debugging
- Anti-upload and anti-file deletion
- Disable internet
- Run PowerShell scripts
- Change file timestamp
- Self-deletion after execution
Various Options
- Installation: specify folder, filename, and increase startup file size
- Customize icon, assembly, and certification
- Display fake messages
- Binder options: run once, do not run on startup
- Execute shellcode
Output Payload
- Extensions: .exe, .pif, .scr
- .NET Framework versions: 4.5, 4.6, 4.8
- Scanner: avcheck