# gdbinit/evilquest_deobfuscator: EvilQuest/ThiefQuest malware strings decrypter/deobfuscator

**github.com/gdbinit/evilquest_deobfuscator**

gdbinit

Latest EvilQuest/ThiefQuest strings decrypt/deobfuscator

(c) Pedro Vilaça 2020, All rights reserved.

[reverser@put.as -](http://10.10.0.46/mailto:reverser@put.as) [https://reverse.put.as](https://reverse.put.as/)

[reference: https://reverse.put.as/2020/09/17/evilquest-revisited/](https://reverse.put.as/2020/09/17/evilquest-revisited/)

python implementation for previous sample(s) by Scott Knight

[https://github.com/carbonblack/tau-tools/tree/master/malware_specific/ThiefQuest](https://github.com/carbonblack/tau-tools/tree/master/malware_specific/ThiefQuest)

It is able to decrypt a single string or a whole file.
```
Usage:
 -f string
    file to decrypt all strings
 -s string
    string to decrypt

```

-----