{
	"id": "5d3cea39-2b72-4921-b4fb-3963ab077cfa",
	"created_at": "2026-04-06T00:07:36.054301Z",
	"updated_at": "2026-04-10T13:11:23.808334Z",
	"deleted_at": null,
	"sha1_hash": "a8d79b71830183e999be33f560a68275ea70670c",
	"title": "GitHub - gdbinit/evilquest_deobfuscator: EvilQuest/ThiefQuest malware strings decrypter/deobfuscator",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 106396,
	"plain_text": "GitHub - gdbinit/evilquest_deobfuscator: EvilQuest/ThiefQuest\r\nmalware strings decrypter/deobfuscator\r\nBy gdbinit\r\nArchived: 2026-04-05 16:51:00 UTC\r\nSkip to content\r\nNavigation Menu\r\nSign in\r\nAI CODE CREATION\r\nGitHub CopilotWrite better code with AI\r\nGitHub SparkBuild and deploy intelligent apps\r\nGitHub ModelsManage and compare prompts\r\nMCP RegistryNewIntegrate external tools\r\nDEVELOPER WORKFLOWS\r\nActionsAutomate any workflow\r\nCodespacesInstant dev environments\r\nIssuesPlan and track work\r\nCode ReviewManage code changes\r\nAPPLICATION SECURITY\r\nGitHub Advanced SecurityFind and fix vulnerabilities\r\nCode securitySecure your code as you build\r\nSecret protectionStop leaks before they start\r\nEXPLORE\r\nWhy GitHub\r\nDocumentation\r\nBlog\r\nChangelog\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 1 of 6\n\nMarketplace\r\nView all features\r\nBY COMPANY SIZE\r\nEnterprises\r\nSmall and medium teams\r\nStartups\r\nNonprofits\r\nBY USE CASE\r\nApp Modernization\r\nDevSecOps\r\nDevOps\r\nCI/CD\r\nView all use cases\r\nBY INDUSTRY\r\nHealthcare\r\nFinancial services\r\nManufacturing\r\nGovernment\r\nView all industries\r\nView all solutions\r\nEXPLORE BY TOPIC\r\nAI\r\nSoftware Development\r\nDevOps\r\nSecurity\r\nView all topics\r\nEXPLORE BY TYPE\r\nCustomer stories\r\nEvents \u0026 webinars\r\nEbooks \u0026 reports\r\nBusiness insights\r\nGitHub Skills\r\nSUPPORT \u0026 SERVICES\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 2 of 6\n\nDocumentation\r\nCustomer support\r\nCommunity forum\r\nTrust center\r\nPartners\r\nView all resources\r\nCOMMUNITY\r\nGitHub SponsorsFund open source developers\r\nPROGRAMS\r\nSecurity Lab\r\nMaintainer Community\r\nAccelerator\r\nGitHub Stars\r\nArchive Program\r\nREPOSITORIES\r\nTopics\r\nTrending\r\nCollections\r\nENTERPRISE SOLUTIONS\r\nEnterprise platformAI-powered developer platform\r\nAVAILABLE ADD-ONS\r\nGitHub Advanced SecurityEnterprise-grade security features\r\nCopilot for BusinessEnterprise-grade AI features\r\nPremium SupportEnterprise-grade 24/7 support\r\nPricing\r\nSign in\r\nSign up\r\ngdbinit / evilquest_deobfuscator Public\r\nNotifications\r\nFork 0\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 3 of 6\n\nStar 6\r\nCode\r\nIssues\r\nPull requests\r\nActions\r\nProjects\r\nSecurity and quality\r\nInsights\r\n1 Branch0 Tags\r\nFolders and files\r\nName Name Last commit message Last commit date\r\nLatest commit\r\ngdbinit\r\nAdd missing license...\r\nSep 18, 2020\r\n72dfc1f · Sep 18, 2020\r\nHistory\r\n3 Commits\r\nREADME.md README.md Fix markdown... argh Sep 18, 2020\r\nmain.go main.go Add missing license... Sep 18, 2020\r\nRepository files navigation\r\nREADME\r\nLatest EvilQuest/ThiefQuest strings decrypt/deobfuscator\r\n(c) Pedro Vilaça 2020, All rights reserved.\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 4 of 6\n\nreverser@put.as - https://reverse.put.as\r\nreference: https://reverse.put.as/2020/09/17/evilquest-revisited/\r\npython implementation for previous sample(s) by Scott Knight\r\nhttps://github.com/carbonblack/tau-tools/tree/master/malware_specific/ThiefQuest\r\nIt is able to decrypt a single string or a whole file.\r\nUsage:\r\n -f string\r\n file to decrypt all strings\r\n -s string\r\n string to decrypt\r\nAbout\r\nEvilQuest/ThiefQuest malware strings decrypter/deobfuscator\r\nResources\r\nReadme\r\nActivity\r\nStars\r\n6 stars\r\nWatchers\r\n2 watching\r\nForks\r\n0 forks\r\nReport repository\r\nReleases\r\nNo releases published\r\nPackages\r\nNo packages published\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 5 of 6\n\nContributors 1\r\n gdbinit fG!\r\nLanguages\r\nGo 100.0%\r\nSource: https://github.com/gdbinit/evilquest_deobfuscator\r\nhttps://github.com/gdbinit/evilquest_deobfuscator\r\nPage 6 of 6",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://github.com/gdbinit/evilquest_deobfuscator"
	],
	"report_names": [
		"evilquest_deobfuscator"
	],
	"threat_actors": [],
	"ts_created_at": 1775434056,
	"ts_updated_at": 1775826683,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/a8d79b71830183e999be33f560a68275ea70670c.pdf",
		"text": "https://archive.orkl.eu/a8d79b71830183e999be33f560a68275ea70670c.txt",
		"img": "https://archive.orkl.eu/a8d79b71830183e999be33f560a68275ea70670c.jpg"
	}
}