├── LICENSE ├── PlugX ├── PlugX_GULP │ ├── plugx_gulp.py │ ├── plugx_gulp_cfg_dec.py │ ├── plugx_versions.txt │ └── x64dbg_extract_payload.py ├── PlugX_THOR │ ├── plugx_thor.py │ ├── plugx_thor_cfg_dec.py │ └── x64dbg_extract_payload.py └── PlugX_XV │ ├── lznt1dec.py │ ├── plugx_xv.py │ ├── plugx_xv_cfg_dec.py │ ├── plugx_xv_cfg_parse.py │ ├── plugx_xv_keylog_dec.py │ ├── plugx_xv_versions.txt │ └── x64dbg_extract_payload.py ├── PoisonIvy └── parse_cfg.py ├── RCSession ├── RCSession.yar ├── rcsession_cfg_decrypt.py └── rcsession_keylog_dec.py └── README.md /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/LICENSE -------------------------------------------------------------------------------- /PlugX/PlugX_GULP/plugx_gulp.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_GULP/plugx_gulp.py -------------------------------------------------------------------------------- /PlugX/PlugX_GULP/plugx_gulp_cfg_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_GULP/plugx_gulp_cfg_dec.py -------------------------------------------------------------------------------- /PlugX/PlugX_GULP/plugx_versions.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_GULP/plugx_versions.txt -------------------------------------------------------------------------------- /PlugX/PlugX_GULP/x64dbg_extract_payload.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_GULP/x64dbg_extract_payload.py -------------------------------------------------------------------------------- /PlugX/PlugX_THOR/plugx_thor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_THOR/plugx_thor.py -------------------------------------------------------------------------------- /PlugX/PlugX_THOR/plugx_thor_cfg_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_THOR/plugx_thor_cfg_dec.py -------------------------------------------------------------------------------- /PlugX/PlugX_THOR/x64dbg_extract_payload.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_THOR/x64dbg_extract_payload.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/lznt1dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/lznt1dec.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/plugx_xv.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/plugx_xv.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/plugx_xv_cfg_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/plugx_xv_cfg_dec.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/plugx_xv_cfg_parse.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/plugx_xv_cfg_parse.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/plugx_xv_keylog_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/plugx_xv_keylog_dec.py -------------------------------------------------------------------------------- /PlugX/PlugX_XV/plugx_xv_versions.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/plugx_xv_versions.txt -------------------------------------------------------------------------------- /PlugX/PlugX_XV/x64dbg_extract_payload.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PlugX/PlugX_XV/x64dbg_extract_payload.py -------------------------------------------------------------------------------- /PoisonIvy/parse_cfg.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/PoisonIvy/parse_cfg.py -------------------------------------------------------------------------------- /RCSession/RCSession.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/RCSession/RCSession.yar -------------------------------------------------------------------------------- /RCSession/rcsession_cfg_decrypt.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/RCSession/rcsession_cfg_decrypt.py -------------------------------------------------------------------------------- /RCSession/rcsession_keylog_dec.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/RCSession/rcsession_keylog_dec.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/rivitna/APT/HEAD/README.md --------------------------------------------------------------------------------