Skip to content

Commit

Permalink
Add hash algorithm for unknown Mythic agent
Browse files Browse the repository at this point in the history
  • Loading branch information
y0ug committed Aug 9, 2023
1 parent 32b44d0 commit 3599253
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions algorithms/mythic_unknown.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
#!/usr/bin/env python

DESCRIPTION = "API hash find in an unknown Mythic agent, need a XOR key"
# Type can be either 'unsigned_int' (32bit) or 'unsigned_long' (64bit)
TYPE = "unsigned_int"
# Test must match the exact has of the string 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'
TEST_1 = 3762100525


def hash(data):
crc = 0xffffffff
for val in data:
for _ in range(8):
tmp = crc
crc = crc >> 1 & 0xffffffff
if (val ^ tmp) & 1 != 0:
crc ^= 0xedb88320
val = val >> 1 & 0xffffffff
return crc

0 comments on commit 3599253

Please sign in to comment.