Live Stream VOD: Garble GoLang String Recovery (Patreon)

In this Twitch stream we continue our efforts to recover strings encrypted with the Garble GoLang obfuscator. We manage to identify a common pattern that not only allows us to identify Go samples where Garble has been used but also provides a pattern match for our string decryption tool. 

Spoiler alert - we have a nice PoC tool by the end of the stream : )

Samples

623a5f4c57cf5b3feb6775508cd6492f89d55ce11f62e0b6fb1020fd730b2e8f 

Notes

Golang Garble String Decryption - Garble GO obfuscation string decryption