kevthehermit/RATDecoders

New JavaDropper File

gakar06 opened this issue · 1 comments

There seems like there is another file similar to the "c.dat" file. It uses an XOR of 0xDB instead of the 0xDD. The 2 hashes that I have are "1d8d9cfed0f4311541cbc7322664ba12a335e9c0432bc850a06b3e2d22d24cff" and "131a897b3af60f42c6a314e4aa767c101c58d53c1a8b82e083de3635976c4993".

Found a few more c.dat files that are XOR'd with 0xDD if you care to look at them.

2f03d8a84cca937c3a2c930807ad3847c482e41473f25145e1ac184df2940fde
3e4034eb97cb445fc48b344a988f03e7fdf78d5188a60fad7a1191c46da4a516
58141a31d5a281deadaed7c967a29895ec3f541ad7fb81f204c1c0010fe14061