Decode Schism from PNG

This TTP decodes the PNG to obtain the script for Schism. Each character for the code is hidden in each pixel's RGB value. The ascii value of the character is obtained by combining the last two 2 bits for Red, and the last 3 bits for green and blue (in order). The TTP will output a Python file containing Schism.
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.


Test this TTP

Download Operator (1.7.1)
Test this TTP using one of our Operator chains
Operation Ghost


Emulating APT 29 malware loader via steganography.