Dynamic String Decryption With x64dbg
Added 2023-12-03 01:45:53 +0000 UTCA short tutorial demonstrating how to use x64dg to dynamically decrypt the encrypted strings in Pikabot. Though we are using Pikabot as an example this technique is generally applicable to any string encryption that requires a function call to decrypt each string.
Reference sample:
39d6f7865949ae7bb846f56bff4f62a96d7277d2872fec68c09e1227e6db9206
The full VOD for the stream where this technique was used can be found here:
Live Stream VOD: Pikabot is Back - Part 1
Comments
Nice, I didn’t know that trick. Very useful. Thank you!
Nicklas Keijser
2023-12-04 11:46:56 +0000 UTC
