NETWIRE Configuration Extractor

This document provides setup and usage instructions for a tool that extracts configuration artifacts from NETWIRE malware samples, including encryption keys, C2 endpoints, and strings. It recommends Docker as the primary execution method (with an option to use Poetry locally), and supports processing single files or directories of unpacked samples, outputting the recovered data to a specified directory.