Live Stream VOD: Lumma Stealer Deobfuscation - Part 1
Added 2024-04-13 19:43:31 +0000 UTCThis is the first part of our series on removing the code obfuscation from the latest version of Lumma Stealer. In this VOD we identify the opaque predicate patterns that are preventing IDA from reconstructing the control flow and we begin to build an IDAPython script to remove them.
Sample
18a065b740da441c636bce23fd72fc0f68e935956131973f15bf4918e317bf03 [UnpacMe]
Notes
Comments
Hahaha!! Chat just let me burn! They all knew the answer!
OALABS
2024-04-25 18:33:59 +0000 UTCI was trying not to laugh when you entered the decimal value in IDA, until I heard "God, damn it!" I couldn't stop laughing anymore. :))))
m4n0w4r
2024-04-25 14:42:08 +0000 UTC
