DONUT-DECRYPTOR

Summary from the TLDR InfoSec newsletter

donut-decryptor is a Python script that searches files for known indicators of the donut obfuscator’s loader shell code. If found, it will locate, decrypt, and parse the shell code, dumping any configuration data or modules to disk.