Tropical Live Stream VOD: Dynamic Python Deobfuscation Attacking The Interpreter
Added 2024-09-01 01:24:13 +0000 UTCIn this live stream we analyze an unknown python stealer that comes bundled as a PyInstaller, but instead of static analysis we opt for dynamic analysis with x64dbg!
Sample
2a19ba63e85ce75d5f2d884011dfc94f616b176ed89a67c1acc0fe2179e8b591 [UnpacMe]
Notes
Python Hunting - Triaging this unknown python stealer with some breakpoints
Comments
x64dbg was not stopping for me either. I believe the case was because my python was slightly older version and instead of using PyParser_ASTFromString it was using another function. I didn't dig deep enough to see which one though...
Ilia Mandjukov
2025-01-20 12:01:36 +0000 UTCThat's not enough info to help you troubleshoot, hop on discord and dump all the info you can. Maybe we can figure it out. Best guess right now is that you are using an old version of x64dbg? SANS version maybe?
OALABS
2024-12-02 18:28:36 +0000 UTCThis trick didnot worked well for me, may be bug in x64dbg. Was unable to log nor debugger was stopping at breakpoint sometimes.
recon2024
2024-12-01 14:06:56 +0000 UTCHaha, thanks as well! I just watched it today
Karsten Hahn
2024-09-28 05:49:57 +0000 UTCYeh man!! Nice work!
OALABS
2024-09-23 15:10:06 +0000 UTCHell yeah!! Thanks for giving me shout out :)) And as always, nice stream and nice trick!!!
m4n0w4r
2024-09-18 09:22:22 +0000 UTC
