INNER CODE UNIT · Python

num4

gendigitalinc/ioc · Bobik/decryptor.py:50

        num4 = array2[(array2[num3] + array2[num]) % 256]
        array3[i] = data[i] ^ num4
    return array3


# ======================================================================================================================


for fn in Path(".").glob(sys.argv[1]):
    print("Processing " + fn.name)
    data = bytearray(fn.read_bytes())
    decrypt_data = decrypt(decrypt_key, data)
    unzip_data = gzip.decompress(bytearray(decrypt_data))
    xmlstr = minidom.parseString(unzip_data).toprettyxml(indent="\t")
    fn.with_suffix(".xml").write_text(xmlstr, encoding='UTF-8')

View source record →

📰 Research Paper
Loading…
⏳ Fetching content…