Skip to content

Latest commit

 

History

History
15 lines (8 loc) · 438 Bytes

README.md

File metadata and controls

15 lines (8 loc) · 438 Bytes

IcedDecrypt

IcedID Decryption Tool

IceDecrypt is a bulk IcedID decryption tool allowing for decryption/payload reassembly for the new license.dat payload drop, along with gziploader payload decryption, and bot config extraction for icedid downloaders (less likely to work due to method of extraction + iced's own defenses).

Required Libs

pefile

argparse

Usage

python3 IcedDecrypt.py -f [input file] -o [optional file output]