Baldr Stealer Confused

[krown]

 Malware Protected by Confuser modded

 

sample(2).exe

Edited October 7, 2019 by krown

[Cursedzx]

Ok, I have deobfuscated the file. Enjoy i guess. Btw some parts of the file uses "dynamic" so it wouldn't look like just "dynamic" it dnspy. There will be something like callsite stuff cuz that's how the compiler interprets the dynamic data type.

sample(2)-SysMathCallFixed-DelegatesFixed-FieldToLocalFix-VarsUnmelted-StringDec_deobfuscated.exe