Live Stream VOD: AgentTesla Config Extraction with Automated .NET Parsing (dnlib and Python)
Added 2022-11-20 18:57:18 +0000 UTCIn this twitch stream we use AgentTesla as an example to learn more about automated .NET parsing using dnlib and Python. We are able to locate and decrypt the strings table protected with the open source .NET obfuscator called obfuscar.
Samples
20f4ec03549be469302c0fcb5f55307680fd189aa733f90eb59cb2fbc34317cc
cb3afdb1e17d5bdaf641e633434ac71855e5dcfdd21d66a565f0dc9844d30030
Notes
