funkymalwareparsers

December 18, 2019 ยท View on GitHub

Build status

Parsers for custom malware formats ("Funky malware formats")

Contains:

  • lotus_parser: parser for Ocean Lotus custom executable format
  • isfb_parser: parser (and converter) for ISFB (Gozi v3) scrambled PE
  • bee_parser: parser for HiddenBee custom executable format - available here
  • iced_id_parser: parser (and converter) for IcedID scrambled PE