Skip to content

Instantly share code, notes, and snippets.

View RussianPanda95's full-sized avatar
😈

RussianPanda RussianPanda95

😈
View GitHub Profile
@0xToxin
0xToxin / remcosConfigExtractor.py
Created July 22, 2023 20:07
RemcosRAT "raw" config decryptor.
'''
output will be in format of list, was lazy to play with regex,
if you want to see regex fetching, check RussianPanda95 extractor:
https://github.com/RussianPanda95/Configuration_extractors/blob/main/remcos_rat_config_extractor.py
'''
import pefile
import struct
from Crypto.Cipher import ARC4
import binascii