Decrypt files encoded with LoroBot malware

decrypt_lorobot.py

#! /usr/bin/env python3
from itertools import cycle
import binascii

key = binascii.unhexlify("C9936BCADFBFC0614649334746AE8FCC")
key = bytearray(key)


def xor(data, key):
    return bytearray([a ^ b for (a, b) in zip(data, cycle(key))])

with open("Bluehills_crypted.jpg", "rb") as f:
    crypted_file = bytearray(f.read())

decrypted_file = xor(crypted_file, key)
with open("Bluehills.jpg", "wb") as f:
    f.write(decrypted_file)