relative / synchrony

javascript-obfuscator cleaner & deobfuscator
https://deobfuscate.relative.im/
GNU General Public License v3.0
840 stars 108 forks source link

Deobfuscation issues with obscure obfuscator (can't find any info) #50

Open twilight-sparkle-irl opened 1 year ago

twilight-sparkle-irl commented 1 year ago

Hi, I'm trying to deobfuscate some malware that appears to be using a custom obfuscator. I'm unsure if you take requests, but here's the code I found, referencing "unityobf."

(This is a malware sample, running in an electron environment! Please be careful, only hold with tongs.)

index.js

relative commented 1 year ago

the obfuscator is https://github.com/MichaelXF/js-confuser and there are some deobfuscator transformers in this repo for it but they probably wont work anymore