Adding a module to decode traffic from Netwire RATs

Why? you later use json.loads on this -- why not just directly create a python dict?