Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #Decoder for some obfuscated njRat version
- #Link:
- import os,sys,time
- from Crypto.Cipher import DES3
- import base64
- def XXcipherDecode3DESXX(inFile,outFile):
- key = "0102030405060708090a0b0c0d0e0f101112131415161718".decode('hex')
- iv = "2109162d0B01061E".decode('hex')
- cipher = DES3.new( key, DES3.MODE_CBC, iv)
- fIn = open(inFile,"rb")
- contentX = fIn.read()
- contentX_Base64Decoded = base64.b64decode(contentX)
- fIn.close()
- decryptedX = cipher.decrypt(contentX_Base64Decoded)
- fOut = open(outFile,"wb")
- fOut.write(decryptedX)
- fOut.close()
- def main():
- if len(sys.argv)!=3:
- print "Usage: Decode_njRat_3Des.py input.txt outputfile.exe"
- sys.exit(-1)
- else:
- XXcipherDecode3DESXX(sys.argv[1],sys.argv[2])
- if __name__ == "__main__":
- main()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement