Tutorials/asyncrat_config_parser at master ·
jeFF0Falltrades/Tutorials
By jeFF0Falltrades
Archived: 2026-04-06 01:00:43 UTC
This repository and its accompanying video are still very valuable for those learning malware analysis and tool
automation, but the Rat King parser is considered more stable for production use.
pip install -r requirements.txt
usage: asyncrat_config_parser.py [-h] [-d] file_paths [file_paths ...]
positional arguments:
 file_paths One or more AsyncRAT payload file paths (deobfuscated)
optional arguments:
 -h, --help show this help message and exit
 -d, --debug Enable debug logging
$ python3 asyncrat_config_parser.py ReverseMe.exe | python -m json.tool
{
 "aes_key": "40766aef6f9d6980c001babeef7020446eff2ef31cf910cab59d5429d7a89c37",
 "aes_salt": "bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941",
 "config": {
 "Anti": "false",
 "BDOS": "false",
 "Certificate": "MIIE8jCCAtqgAwIBAgIQAMe2UpmBbjqdMItW7xySBzANBgkqhkiG9w0BAQ0FADAaMRgwFgYDVQQDDA9Bc3luY1JB
 "Delay": "3",
 "Group": "Default",
 "Hosts": "test.me.com",
 "Install": "false",
 "InstallFile": "",
 "InstallFolder": "%AppData%",
 "Key": "N3UwelhLaE5BaTE5Z3piMFEwMFZlWHI2Z01Nc3dPOWM=",
 "MTX": "AsyncMutex_6SI8OkPnk",
 "Pastebin": "null",
 "Ports": "8808,7707",
 "Serversignature": "ZKSsdlzb5lEwgaF35KH+qv8Ai7M74R+W9CU2NpGy4ucvLuKhDbUpJtqllJuFAk22wP6qgCQ8lvE8zy+LlVHm
 "Version": "0.5.7B"
 },
https://github.com/jeFF0Falltrades/Tutorials/tree/master/asyncrat_config_parser
Page 1 of 2

"file_path": "ReverseMe.exe"
}
Source: https://github.com/jeFF0Falltrades/Tutorials/tree/master/asyncrat_config_parser
https://github.com/jeFF0Falltrades/Tutorials/tree/master/asyncrat_config_parser
Page 2 of 2