Live Stream VOD: Lumma Stealer Deobfuscation - Part 2 (Patreon)

This is the second part of our series on removing the code obfuscation from the latest version of Lumma Stealer. The stream is more of a short re-cap of the completed tool from the first stream where we go over the shortcomings and discuss possible future approaches.

There is also a bit of technical difficulty in the middle when Twitch decided to completely drop our stream! Lol thanks Jeff!

P.S.

If anyone knows why the make instruction IDAPython code was not working I would be interested to find out. This is the first time I have encountered something like this.

Sample

• 18a065b740da441c636bce23fd72fc0f68e935956131973f15bf4918e317bf03 [UnpacMe]

Notes

• Lumma Stealer Obfuscation - Taking a look at obfuscation in the latest version of lumma

• lumma_cf.py