in icedid/peloader/icedid_peloader.py [0:0]
def decrypt(self, encrypted_config: bytes) -> bytes:
data = encrypted_config[:-16]
size = len(data)
log.info("size of data: %d", len(data))
key = encrypted_config[-16:]
log.info("encryption key: %s", malduck.enhex(key).decode("utf-8"))
self.key = malduck.enhex(key).decode("utf-8")
return self.internal_decrypt(data, size, key)