[mothered]

If I crypt  the RAT and then start spreading, when the user installs this RAT will the AV detect it?

If the signature Is triggering the detection and you FUD the file, It'll bypass the AV.

However If the AV Is using a behavioral approach, whereby It examines the file's Intention prior to executing It's action, then It will prevent the RAT from performing It's task.