DotNET_XorCryptor icon indicating copy to clipboard operation
DotNET_XorCryptor copied to clipboard

A new simple and powerfull packer for malware

DotNET XorCryptor

You can also pay attention to an older project - NET-MalwareCryptor

This is a .NET executable packer with payload encryption. Use for educational purposes only.

How to use?

  • --file {path} - specify file name
  • --flood - add junk classes to file
  • --proxy - move original entry point to from Main()

For example:

xor-pack.exe --file "stub.exe" --proxy --flood

For enhanced effectiveness, it is strongly recommended to heavily obfuscate the assembly before applying the encryption process.

DOWNLOAD COMPILED