def decrypt()

in icedid/peloader/icedid_peloader.py [0:0]


    def decrypt(self, encrypted_config: bytes) -> bytes:
        data = encrypted_config[:-16]
        size = len(data)
        log.info("size of data: %d", len(data))
        key = encrypted_config[-16:]
        log.info("encryption key: %s", malduck.enhex(key).decode("utf-8"))
        self.key = malduck.enhex(key).decode("utf-8")
        return self.internal_decrypt(data, size, key)