In this twitch stream we triage an Amadey Loader malware sample and write a config extractor in Python.
Packed Sample:
7ff0ff6e51a58398ad73da3cc8e7e6233a23e49d93aaa4b190672e4f9f08b9bb
Unpacked Sample:
6e01f9d1997186d06274a508bc0a511aa6fb50e430b77efca593c00d3fc62cba
Notes (including config extractor code):