go_parser

Yet Another Golang binary parser for IDAPro

DDGBotnetTracker

Source code of DDG Mining Botnet tracker

decrypt_CypherStr_kemonsys

Decrypt Cypher Strings in malicious kemon.sys, which drops "shuangqiang" trojan

LSDMiner_DNS_TXT_Decrypt

Decrypt DNS TXT data that encrypted by AES128bit of botnet lsdminer malicious sample

decode_gob_in_ddgs_v4005

Decode gob encoded Seed Nodes data in malware sample of DDG botnet v4005