Home Artists Posts Import Register

Content

In this Twitch stream we build a config extractor for Mystic Stealer that is able to handle their "custom" obfuscation.

NOTE: We are troubleshooting some issues with Patreon video embeds. If you can't see/watch the video please let me know (comment or DM, whichever you prefer).

Samples

BF38A3699AB2072DEA806FF2EE3E54FCA4ABFA983BE9CBB207C3AE8E65095364 

Notes

Mystic Stealer - The many variants of this new stealer 

Files

Live Stream VOD: Mystic Stealer Deobfuscation

Comments

m4n0w4r

For tedious task like formatting space for hex bytes like ex "558bec81ec1c0100008bd1c745f48cb1b4a7c745f8a6b1a16a33c966c745fcb86ac645febd8a440df42c4588440de84183f90b7cf056" . You can paste it into cyberchef and use recipe: recipe=From_Hex('Auto')To_Hex('Space',0) Tks for funny stream :)!