FLOSS - FireEye Labs Obfuscated String Solver (Automatically extract obfuscated strings from malware) #Malware #Analysis

Rather than heavily protecting backdoors with hardcore packers, many malware authors evade heuristic detections by obfuscating only key portions of an executable. Often, these portions are strings and resources used to configure domains, files, and other artifacts of an infection. These key features will not show up as plaintext in output of the strings.exeutility that we commonly use during…