Hard CrackMe (LeetFuscator)

Language: C#(.Net)

Goal: to get the key of obfuscated file

Key on the screenshot is wrong, you have to crack this CrackMe and send key with tutorial on how did you do that.

File Information

Submitter Alex0

Submitted 07/01/2021

Category CrackMe

View File

Edited July 3, 20214 yr by Alex0
Forgot the name of protector

20 Seconds

79320480-148247987-UXNEIFN

hi yeetret

As It is a Crack Me and the Goal is to get the key of obfuscated file

So I am going to find the Key without actually Unpacking It.

Methodology -

Quote

 

• Run the software. 
• Open the Process Hacker.
• Enter anything in the TextBox and It will show an Error.
• Check for that in Memory Strings and You will find out the Correct Key just near to it.

 

Valid Key -

Spoiler

79320480-148247987-UXNEIFN

Image -

Spoiler

 

2 hours ago, BlackHat said:

As It is a Crack Me and the Goal is to get the key of obfuscated file

So I am going to find the Key without actually Unpacking It.

Methodology -

Valid Key -

  Reveal hidden contents

79320480-148247987-UXNEIFN

Image -

  Reveal hidden contents

 

Hello Blackhat

Can you share your Process Hacker?

 

Thanks

58 minutes ago, tarequl.hassan said:

Hello Blackhat

Can you share your Process Hacker?

 

Thanks

lol lol why you even here !!! search in google !!!

3 hours ago, tarequl.hassan said:

Hello Blackhat

Can you share your Process Hacker?

 

Thanks

Hello, tarequl.hassan!

I think he used this https://processhacker.sourceforge.io/downloads.php

To get straight to the Memory Strings you should do folowing:

1. Open obfuscated app

2. Open process hacker

3. Find your process in Process Hacker and right click on it

4. Select "Properties" and navigate to tab called "Memory"

5. You will see button in top-right called "Strings..."

That's it, I hope it helped. Have a nice day!

Edited July 2, 20214 yr by Alex0

10 hours ago, Alex0 said:

Hello, tarequl.hassan!

I think he used this https://processhacker.sourceforge.io/downloads.php

To get straight to the Memory Strings you should do folowing:

1. Open obfuscated app

2. Open process hacker

3. Find your process in Process Hacker and right click on it

4. Select "Properties" and navigate to tab called "Memory"

5. You will see button in top-right called "Strings..."

That's it, I hope it helped. Have a nice day!

Thanks mate for the support with the procedure. 

 

Have a nice day.

 Patched it to accept any key.