PowerDecode¶

Category: Programming / PowerShell

Homepage: https://github.com/Malandrone/PowerDecode

License: GPL-3.0 License

Source: Git

Profiles: Full, Basic

Tags: powershell, deobfuscation, malware-analysis

PowerDecode is a PowerShell-based tool that allows to deobfuscate PowerShell scripts obfuscated across multiple layers. The tool performs code dynamic analysis, extracting malware hosting URLs and checking http response.It can also detect if the malware attempts to inject shellcode into memory.