Tycoon 2FA Exfil Decrypt Data

HTML

<script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"></script>

JavaScript

function encryptData(data) {
  const key = CryptoJS.enc.Utf8.parse('1234567890123456');
  const iv = CryptoJS.enc.Utf8.parse('1234567890123456');
  const encrypted = CryptoJS.AES.encrypt(data, key, {
    iv: iv,
    padding: CryptoJS.pad.Pkcs7,
    mode: CryptoJS.mode.CBC
  });
  return encrypted.toString();
}

function decryptData(encryptedData) {
  const key = CryptoJS.enc.Utf8.parse('1234567890123456');
  const iv = CryptoJS.enc.Utf8.parse('1234567890123456');
  const decrypted = CryptoJS.AES.decrypt(encryptedData, key, {
    iv: iv,
    padding: CryptoJS.pad.Pkcs7,
    mode: CryptoJS.mode.CBC
  });
  return decrypted.toString(CryptoJS.enc.Utf8);
}

request_data = unescape("YiynwGd1cx68J1czdOGRdkJ9jaoHw%2BMSXB1oA0ofy%2FPHmHYAfTNs8D4kfeHheywy%2FzJEp2QsL6ADjP%2F4p4bcwglFF6eFu7aneSHYvZdMmkjKd2id7t3CMgZkJHp959t5");
response_data = unescape("T0AUBGMnvk1CaBUEm/MChLFOW+9/Gui7nSIRk7rO7ZQyp7lgegxq+ONMXYZiiuTYWxtCDlJGtJ/Bn3rWZ5gK/UutgDwHT25Dl4+446bHvX7P5j106BUU+JiGWK7qJAsy5yDuIINYbxViQgjpV4vh9QbftF5OUwwhix1xTV4FDDFjzMzav55Kr37zYQMhqly3Zf8pJe5DQ2Q2az7V5plZVOuZy8Sdo3wkP7FtjPsLSeFyBuPp1COUACulSCeMfXtIluR9OQUjTY1Kc0rKQYRZslvrg/YZM5YfcwMNUeS5V54voCPlFttHkjeZiPhuvzXXGrBac2Y6nEhe2hswHgiaYTIg0/7ttIIxNXmwU4WzicXgSrnja7B+G1PhJu+7SsD6xMINFPwZznUwdEVMgLpN5cqGOlCn4V13uC6wq/6xwsIqqtnpTMRKOanu8jCrM5zmN1QmrTM+HIrf5FAMjTj6mXSmrs1+b71DMivMYfaJ2YM=");
console.log(decryptData(response_data));