Switch branches/tags
Nothing to show
Find file History

README.md

TrickBot

Decoders for TrickBot resource files
To use the scripts, dump the resources first (i.e. with PE-bear).

  • trick_decoder.py - decodes TrickBot's core modules (32/64-bit bots) - from resources of the TrickBot loader executable
  • trick_config_decoder.py - decodes TrickBot's configuration and additional modules