/malra1n

De-obfuscated version of all 'checkra1n for windows' executables floating around

Primary LanguageC#

Deobfuscated version of malra1n

Support will not be given to build.

(Checkra1n windows imitations that contain heuristic malware)

This is purely informational and should NOT be built OR used.

You would have a much better time using palen1x.

Writeup for deobfuscation

Tools used:

  • De4dot
  • Visual Studio
  • DnSPY
  • Cflow/String Cleaner

Inside the .dll file, if you use DnSPY to check it out, you will find a checkra1n based payload that could easily have been tampered with:

image

Finally,

Please do not use these so called checkra1n windows executables.