Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Decryption failed #67

Open
mbv opened this issue Mar 12, 2023 · 1 comment
Open

Decryption failed #67

mbv opened this issue Mar 12, 2023 · 1 comment

Comments

@mbv
Copy link

mbv commented Mar 12, 2023

MethodDecrypter failed:
image

Seems it encrypted using .net reactor 6.9.0.0.
For decrypting necrobit it using DecrypterV2 it cannot fetch DecryptionKey and DecryptionIV:

Screenshot 2023-03-12 at 16 33 37

Main method seems have Control Flow Obfuscation via goto:
image

It cannot fetch DecryptionKey and DecryptionIV, because these arrays declaration not liner, it also obfuscated:
image

When we tried deobfuscate this Control Flow Obfuscation code:
image

It replaced a little equations. And code looks better, but also contains "proxy" boolean methods:
image
image

@ex1dreamer
Copy link

same issue. necrobit decriptor fails with following error:
[ERROR] An unexpected error occurred during decrypting methods. Invalid argument value.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants