oalabs
patreon
Live Stream VOD: Mystic Stealer Deobfuscation
🕑 Added 2023-10-24 14:00:05 +0000 UTCIn this Twitch stream we build a config extractor for Mystic Stealer that is able to handle their "custom" obfuscation.
NOTE: We are troubleshooting some issues with Patreon video embeds. If you can't see/watch the video please let me know (comment or DM, whichever you prefer).
Samples
BF38A3699AB2072DEA806FF2EE3E54FCA4ABFA983BE9CBB207C3AE8E65095364
Notes
Mystic Stealer - The many variants of this new stealer
Comments
m4n0w4r
For tedious task like formatting space for hex bytes like ex "558bec81ec1c0100008bd1c745f48cb1b4a7c745f8a6b1a16a33c966c745fcb86ac645febd8a440df42c4588440de84183f90b7cf056" . You can paste it into cyberchef and use recipe: recipe=From_Hex('Auto')To_Hex('Space',0) Tks for funny stream :)!
