> ## Documentation Index
> Fetch the complete documentation index at: https://witchking.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# PyInstaller Sample Analysis

> Unpack and decompile compiled Python malware.

```
Analyze the Python binary at /home/remnux/samples/stealer.exe:

1. Use remnux-ssh triage_python on the file
2. If PyInstaller detected, use pyinstaller_extract to unpack it
3. Decompile any .pyc files found with python_decompile
4. Extract C2 configuration from the decompiled source
5. Cross-reference IOCs with virustotal
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.