{"repo":"JPCERTCC/aa-tools","free":true,"listed":false,"github":"https://github.com/JPCERTCC/aa-tools","clone":"git clone https://github.com/JPCERTCC/aa-tools.git","description":"Artifact analysis tools by JPCERT/CC Analysis Center","language":"Python","stars":461,"topics":["security","malware","python"],"license":null,"category":"security-tools","readme_excerpt":"aa-tools Artifact analysis tools by JPCERT/CC Analysis Center Deob NOOPLDR.py IDA plugin Tool to deobfuscate CFF used by NOOPLDR malware Article/Blog entry: https://blogs.jpcert.or.jp/ja/2024/07/mirrorface.html (Japanese) GobRAT-Analysis C2 Commands Emulation tools in go language that supports analysis of GobRAT malware Article/Blog entry: https://blogs.jpcert.or.jp/ja/2023/05/gobrat.html (Japanese) https://blogs.jpcert.or.jp/en/2023/05/gobrat.html (English) apt17scan.py Volatility plugin for detecting APT17 related malware and extracting its config Article/Blog entry: http://www.jpcert.or.jp/magazine/acreport-aptscan.html (Japanese) http://blog.jpcert.or.jp/2015/11/a-volatility-plugin-created-for-detecting-malware-used-in-targeted-attacks.html (English) emdivi postdata decoder.py Python script for decoding Emdivi's post data Article/Blog entry: http://www.jpcert.or.jp/magazine/acreport-emdivi.html (Japanese) http://blog.jpcert.or.jp/2015/11/decrypting-strings-in-emdivi.html (English) emdivi string decryptor.py IDAPython script for decrypting strings inside Emdivi Article/Blog entry: http://www.jpcert.or.jp/magazine/acreport-emdivi.html (Japanese) http://blog.jpcert.or.jp/2015/11/decrypting-strings-in-emdivi.html (English) Citadel Decryptor Data decryption tool for Citadel Article/Blog entry: http://www.jpcert.or.jp/magazine/acreport-citadel.html (Japanese) http://blog.jpcert.or.jp/2016/02/banking-trojan--27d6.html (English) adwind string decoder.py Python script for decoding","default_branch":null,"files":null,"tree":[],"storefront":"/r/JPCERTCC","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/JPCERTCC/aa-tools/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}