Live Stream VOD: Automated Go String Decryption for UNK Obfuscator - Part 1 (Patreon)

In this Twitch stream we extend our previous work on Garble Go string decryption to tackle another type of obfuscator used for GoLang that creates in-line obfuscated strings (similar to ADV) instead of using functions. The source/name of the obfuscator is currently unknown but the obfuscation pattern in the compiled binary is easy to identify.

Samples

dd124a7b396150e4d8275c473594e47ac24606ef0955e2c13310aac9045554ac

Notes

Go Stack Strings - Researching a generic solution to decrypt these stack strings