CyberChef
Named by 9 kept items in this workspace.
Search every workspace for CyberChef. It matches the name as written, so it can find other things that share it.
The items that name it 9
Used by Josh Kiriakoff to decode the Base64/gzip-encoded payload.
data analysis
Used to demonstrate/perform Base64-to-gunzip decoding of the stage 1 loader's payload
Used via a reusable recipe created by Huntress analyst Amelia Casley to analyze the encoded PowerShell adversaries were deploying.
used with the 'From Charcode' recipe to convert ASCII-encoded shellcode bytes into readable form
Used to decode hex-encoded WordWheelQuery registry values (search & replace, hex to ascii) to recover search term and server destination
used to convert extracted hex byte values to ASCII to reveal the password
Web-based analysis toolkit for encoding and encryption
All technologies in this workspace.