oalabs
patreon
Live Steam VOD: New Rust Packer Protects Zharkbot
🕑 Added 2024-07-15 14:00:14 +0000 UTCIn this twitch stream we take a look at a new packer being used to protect the latest version of Zharkbot... plot twist, the packer is written in rust!
Sample
068ef78225ab94c3f9c228d6248911986c23317d269f0bb5d0a46bd15cd93e80 [UnpacMe]
Notes
Zharkbot In A RUST Shell - Taking a look at this updated ZharkBot in a rust packer
Comments
m4n0w4r
For dumping the payload after unpacking, if we know the payload size, I often use the command savedata to save memory region to disk: https://help.x64dbg.com/en/latest/commands/memory-operations/savedata.html