From 6dd93213859da6f74a810d2ad77087b78c475080 Mon Sep 17 00:00:00 2001
From: StrangerealIntel <54320855+StrangerealIntel@users.noreply.github.com>
Date: Wed, 25 Aug 2021 01:17:22 +0200
Subject: [PATCH] Create DecoderRequests.js

---
 .../FIN7/2021-08-24/code/DecoderRequests.js   | 26 +++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 cybercriminal groups/FIN7/2021-08-24/code/DecoderRequests.js

diff --git a/cybercriminal groups/FIN7/2021-08-24/code/DecoderRequests.js b/cybercriminal groups/FIN7/2021-08-24/code/DecoderRequests.js
new file mode 100644
index 0000000..41fd09c
--- /dev/null
+++ b/cybercriminal groups/FIN7/2021-08-24/code/DecoderRequests.js	
@@ -0,0 +1,26 @@
+var_request  = "Push your data";
+var encryption_key = "";
+var_type = "decrypt"
+if(var_type === "decrypt") {
+	var_request = unescape(var_request);
+	var request_split = var_request.split("&_&");
+	var_request = request_split[0];
+	if (request_split.length == 2) { encryption_key = request_split[1].split(""); }
+	else { return var_request; }
+}
+else {
+	encryption_key = (Math.floor(Math.random()*9000) + 1000).toString().split("");
+  var_request=unescape(encodeURIComponent(var_request));
+}
+var var_output = new Array(var_request.length);
+for (var i_counter = 0; i_counter < var_request.length; i_counter++) {
+  var var_charCode = var_request.charCodeAt(i_counter) ^ encryption_key[i_counter % encryption_key.length].charCodeAt(0);
+  var_output[i_counter] = String.fromCharCode(var_charCode);
+}
+var result_string = var_output.join("");
+if(var_type === "encrypt") {
+	result_string = result_string + "&_&" + encryption_key.join("");
+	result_string = escape(result_string);
+}
+
+console.log(result_string);