Created
October 21, 2022 14:55
-
-
Save usualsuspect/2daa864841a06f50e199930e5898611b to your computer and use it in GitHub Desktop.
Unknown malware decrypted strings
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Accept-Encoding | |
gzip,deflate | |
Method | |
POST | |
win | |
desktop | |
art-pc | |
/ | |
id= | |
&mail= | |
&name= | |
[__split__] | |
[__innersplit__] | |
Invalid use of command, no value provided? | |
File does not exist: | |
webuploadchunksize set to | |
could not set webuploadchunksize. error at converting: | |
No Output | |
&commandno= | |
&response= | |
Send answer successful, response: | |
Error: | |
response= | |
mode=init&id= | |
&length= | |
Init webupload failed, no response from server | |
Error count reached at part | |
mode=append&fileid= | |
&part= | |
&data= | |
unexpected answer from partupload: | |
Upload successful | |
Upload failed: | |
----- Custom commands: ----- | |
Print help: | |
Upload file via slow webupload: | |
<filepath> | |
Set Chunksize: | |
<chunksize in bytes> | |
Get Chunksize: | |
Get Clear Web Adress: | |
---------------------------- | |
112233445566 | |
456789015 | |
77889900123 | |
lc | |
lr | |
adress | |
clearid | |
http://64.44.135.5 | |
.php | |
/register_2 | |
/online_9 | |
/upload_887741.php | |
HKEY_CURRENT_USER\ | |
SOFTWARE\AppStar | |
ticks | |
__help | |
webupload | |
getwuchunksize | |
setwuchunksize | |
getclearwebadress | |
setclearwebadress | |
c{0}exe | |
md. | |
/c | |
== | |
= | |
application/x-www-form-urlencoded | |
OK |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment