StealBit1.1 and earlier strings and config extraction scripts

Last update: Dec 29, 2022

Related tags

Text Processing stealbit1.1_config_extractor

Overview

StealBit1.1 and earlier scripts

Use strings_decryptor.py to extract RC4 encrypted strings from a StealBit1.1 sample(s).
Use config_extractor.py to extract encrypted configuration(ID and C2s) of a StealBit1.1 sample(s).

Tested on the following samples:

107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636
6c9a92955402c76ab380aa6927ad96515982a47c05d54f21d67603814d29e4a5
26f8447d9f9e230d31cf43b991b85f336af604405572d3b817d4e54bd722bd3d
968875370dbc26a6439860f854c91f9ee675e588f8dbf78e6cb7e20b6d957bec
4b2b0c99b88e3fa7542165be931e2fd863f5546bbae71e9e8f21e2f3a1ebdda5
bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e
4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0
be3b2e41a1622e498da2ca479623397977f8f43d71a521fabe0bba3dbba163a5
4f36bdc3c31a59bae783663385ed9174ecc5dac418ead46f8d14ba6b2beec50f
d9a8ae1d1e143f38845ea1a9dbe8476d2155c7457c7dc2a86bdb0bca1fcbe99f
61ac7ac908791456f2f5827dfd85be27b02027383f76dfd31aba7eff89c1aaee
f1f67fb89c0d1d3a36b086716f276100bc83a3bba2d7318dd3598ff5e2b0d9af

Owner

Soolidsnake

Malware addict

Soolidsnake

GitHub Repository

split Word file by chapter

split Word file by chapter we use the mircosoft word api to code this tool api url:https://docs.microsoft.com/zh-cn/dotnet/api/ if this tool is good f

5 Nov 06, 2021

Convert text to morse code and play morse code sound.

Convert text(english) to morse codes and play morse sound!

5 Jul 15, 2022

A production-ready pipeline for text mining and subject indexing

A production-ready pipeline for text mining and subject indexing

12 Nov 06, 2022

pydantic-i18n is an extension to support an i18n for the pydantic error messages.

pydantic-i18n is an extension to support an i18n for the pydantic error messages

48 Dec 21, 2022

Word and phrase lists in CSV

Word Lists Word and phrase lists in CSV, collected from different sources. Oxford Word Lists: oxford-5k.csv - Oxford 3000 and 5000 oxford-opal.csv - O

14 Oct 14, 2022

Implementation of hashids (http://hashids.org) in Python. Compatible with Python 2 and Python 3

hashids for Python 2.7 & 3 A python port of the JavaScript hashids implementation. It generates YouTube-like hashes from one or many numbers. Use hash

1.4k Jan 02, 2023

A username generator made from French Canadian most common names.

This script is used to generate a username list using the most common first and last names in Quebec in different formats. It can generate some passwords using specific patterns such as Tremblay2020.

5 Nov 26, 2022

An extension to detect if the articles content match its title.

Clickbait Detector An extension to detect if the articles content match its title. This was developed in a period of 24-hours in a hackathon called 'H

5 Jul 26, 2022

A python tool one can extract the "hash" from a WINDOWS HELLO PIN

WINHELLO2hashcat About With this tool one can extract the "hash" from a WINDOWS HELLO PIN. This hash can be cracked with Hashcat, more precisely with

33 Dec 05, 2022

Converts a Bangla numeric string to literal words.

Bangla Number in Words Converts a Bangla numeric string to literal words. Install $ pip install banglanum2words Usage

3 Aug 29, 2022

WorldCloud Orçamento de Estado 2022

World Cloud Orçamento de Estado 2022 What it does This script creates a worldcloud, masked on a image, from a txt file How to run it? Install all libr

2 Oct 12, 2021

Production First and Production Ready End-to-End Keyword Spotting Toolkit

WeKws Production First and Production Ready End-to-End Keyword Spotting Toolkit. The goal of this toolkit it to... Small footprint keyword spotting (K

222 Dec 30, 2022

Python port of Google's libphonenumber

phonenumbers Python Library This is a Python port of Google's libphonenumber library It supports Python 2.5-2.7 and Python 3.x (in the same codebase,

3.1k Dec 29, 2022

Correcting typos in a word based on the frequency dictionary

Auto-correct text Correcting typos in a word based on the frequency dictionary. This algorithm is based on the distance between words according to the

2 Feb 05, 2022

Text Summarizationcls app with python

Text Summarizationcls app This is the repo for the Text Summarization AI Project. It makes use of pre-trained Hugging Face models Packages Used The pa

1 Oct 23, 2021

Maiden & Spell community player ranking based on tournament data.

MnSRank Maiden & Spell community player ranking based on tournament data. Why? 2021 just ended and this seemed like a cool idea. Elo doesn't work well

1 Apr 20, 2022

Hspell, the free Hebrew spellchecker and morphology engine.

Hspell, the free Hebrew spellchecker and morphology engine.

16 Sep 15, 2022

Extract knowledge from raw text

Extract knowledge from raw text This repository is a nearly copy-paste of "From Text to Knowledge: The Information Extraction Pipeline" with some cosm

10 Dec 03, 2022

Deasciify-highlighted - A Python script for deasciifying text to Turkish and copying clipboard

deasciify-highlighted is a Python script for deasciifying text to Turkish and copying clipboard.

3 Mar 18, 2022

Making simplex testing clean and simple

Making Simplex Project Testing - Clean and Simple What does this repo do? It organizes the python stack for the coding project What do I need to do in

1 Jan 30, 2022