mopisec/quasar_analyze

Python script that decodes the Quasar RAT configuration using hardcoded ENCRYPTIONKEY.

quasar_analyze

About

Python script that decodes the Quasar RAT configuration using hardcoded ENCRYPTIONKEY.

Usage

> python quasar_analyze.py [ENCRYPTIONKEY] [DATA_TO_DECODE]

FYI

• Slide about this script (JAPANESE)

License

MIT License