├── 7ev3n ├── README.md ├── seven_decoder1.py ├── seven_decoder2.py └── seven_decoder3.py ├── README.md ├── crabstr.py ├── de-crypter1 ├── README.md └── decrypter1.cpp ├── dyreza ├── README.md ├── dyreza_config_decoder.py └── dyreza_decoder.py ├── kronos ├── kronos_a02_decoder.py ├── kronos_a1_decoder.py └── kronos_beacon_decoder.py ├── latent_bot ├── latent_dec.py └── latent_decode.cpp ├── nsisdec.py ├── pe_unmapper └── README.md ├── rhadamanthys ├── v0.5 │ ├── README.md │ ├── ida_params3_xs1.py │ └── ida_params3_xs2.py └── v0.9 │ ├── README.md │ ├── ida_params3_xs2b_64.py │ └── rhad_stage2_decoder.cpp ├── scraper.py └── trickbot ├── README.md ├── make_bot_key.cpp ├── trick_config_decoder.py ├── trick_decoder.py └── trick_settings_decoder.py /7ev3n/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/7ev3n/README.md -------------------------------------------------------------------------------- /7ev3n/seven_decoder1.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/7ev3n/seven_decoder1.py -------------------------------------------------------------------------------- /7ev3n/seven_decoder2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/7ev3n/seven_decoder2.py -------------------------------------------------------------------------------- /7ev3n/seven_decoder3.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/7ev3n/seven_decoder3.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/README.md -------------------------------------------------------------------------------- /crabstr.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/crabstr.py -------------------------------------------------------------------------------- /de-crypter1/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/de-crypter1/README.md -------------------------------------------------------------------------------- /de-crypter1/decrypter1.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/de-crypter1/decrypter1.cpp -------------------------------------------------------------------------------- /dyreza/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/dyreza/README.md -------------------------------------------------------------------------------- /dyreza/dyreza_config_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/dyreza/dyreza_config_decoder.py -------------------------------------------------------------------------------- /dyreza/dyreza_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/dyreza/dyreza_decoder.py -------------------------------------------------------------------------------- /kronos/kronos_a02_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/kronos/kronos_a02_decoder.py -------------------------------------------------------------------------------- /kronos/kronos_a1_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/kronos/kronos_a1_decoder.py -------------------------------------------------------------------------------- /kronos/kronos_beacon_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/kronos/kronos_beacon_decoder.py -------------------------------------------------------------------------------- /latent_bot/latent_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/latent_bot/latent_dec.py -------------------------------------------------------------------------------- /latent_bot/latent_decode.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/latent_bot/latent_decode.cpp -------------------------------------------------------------------------------- /nsisdec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/nsisdec.py -------------------------------------------------------------------------------- /pe_unmapper/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/pe_unmapper/README.md -------------------------------------------------------------------------------- /rhadamanthys/v0.5/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.5/README.md -------------------------------------------------------------------------------- /rhadamanthys/v0.5/ida_params3_xs1.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.5/ida_params3_xs1.py -------------------------------------------------------------------------------- /rhadamanthys/v0.5/ida_params3_xs2.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.5/ida_params3_xs2.py -------------------------------------------------------------------------------- /rhadamanthys/v0.9/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.9/README.md -------------------------------------------------------------------------------- /rhadamanthys/v0.9/ida_params3_xs2b_64.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.9/ida_params3_xs2b_64.py -------------------------------------------------------------------------------- /rhadamanthys/v0.9/rhad_stage2_decoder.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/rhadamanthys/v0.9/rhad_stage2_decoder.cpp -------------------------------------------------------------------------------- /scraper.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/scraper.py -------------------------------------------------------------------------------- /trickbot/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/trickbot/README.md -------------------------------------------------------------------------------- /trickbot/make_bot_key.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/trickbot/make_bot_key.cpp -------------------------------------------------------------------------------- /trickbot/trick_config_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/trickbot/trick_config_decoder.py -------------------------------------------------------------------------------- /trickbot/trick_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/trickbot/trick_decoder.py -------------------------------------------------------------------------------- /trickbot/trick_settings_decoder.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/hasherezade/malware_analysis/HEAD/trickbot/trick_settings_decoder.py --------------------------------------------------------------------------------