Skip to content

Instantly share code, notes, and snippets.

@mak
Created May 28, 2015 13:16
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save mak/8102226fa35993954249 to your computer and use it in GitHub Desktop.
Save mak/8102226fa35993954249 to your computer and use it in GitHub Desktop.
get_dridex_patebin() { echo "http://pastebin.com/download.php?i$(cat $1 | grep --binary-files=text -Pzo "Content-Type: application/x-mso\r?\n(.*\r?\n)*\r?\n------=_N" | head -n-2 | grep -v mso | tr -d "\n\r" | base64 -d | dd if=/dev/stdin bs=1 skip=50 2>/dev//null| openssl zlib -d | python2 oledump.py -s a -v | grep 'i?php.daolnwod/moc.nibetsap//:p'| cut -d'+' -f3 | cut -d'"' -f2 | rev)" ; }
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment