Index

20151217_2dc88eec3c08115cee4958e57f8ef967.js Apr 24 javascript-malware-collection

6006bb704f17f5c04fc8c9098fd126de2fd70fcff0dc61c4719a1c46bc15c8e6 O₂(As₅C)H₂(Db₂Po)Md

string/reconstructobfuscation/syntax

20151217_4c8170444060ba5ce87b7ce33db2c4d1.js Apr 24 javascript-malware-collection

69dd9abb9a97df940e005445f07d1caae4299fe5b4c372e88bac7c9771277ab8 O₂(As₅C)H₂(Db₂Po)Md

91% Obfuscated eval loader reconstructing C2 URL

20151217_b4ae7bbebd555147f4ee2ea455947017.js Apr 24 javascript-malware-collection

8cf269ebd73daf0cbb736c4397f62d9f933b9fa81ffa146e0f683d2167f18700 O₂(As₅C)H₂(Db₂Po)Md

string/reconstructobfuscation/syntax

20151217_33fd8f033914c8f4f8f4e87657e81a15.js Apr 24 javascript-malware-collection

d7f5023fa48fa8d38f8ea6dc1998bd1535dc96da4a1c5d24c45037f83bf97e7a O₂(As₅C)H₂(Db₂Po)Md

93% Heavily obfuscated, eval, XOR C2

20151217_eff970219e1fdaa8379d8181d9a0c1eb.js Apr 24 javascript-malware-collection

e3a09da6295d2beed0e4bc2d9b330e96415f770b0b7612b1b11536cc650c3ad9 O₂(As₅C)H₂(Db₂Po)Md

92% 高度混淆，eval执行，XOR重建URL

20151217_2db22bdc06e3c00b710bc91b284b2ae5.js Apr 24 javascript-malware-collection

25e5a3849a870a7f5b7a4d36e4cff56c5fdef9ea50877549876d3e069fa51c67 O₂(As₅C)H₂(Db₂Po)Md

92% Heavily obfuscated C2 payload

20151217_2a42f80c442dd1dabc3826f8468b659f.js Apr 24 javascript-malware-collection

7b0c206b2b4ad7eecdc99699cfd1f28447c8fef81511a55c8b2a69df6dfd4dc6 O₂(As₅C)H₂(Db₂Po)Md

string/reconstructobfuscation/syntax

20151217_b124f15c7fc2ac34775dd710b82bca40.js Apr 24 javascript-malware-collection

ad46c825b930af0d5192dadb7332368a312fb82fb36a566c40d656ef23111303 O₂(As₅C)H₂(Db₂Po)Md

91% Heavily obfuscated eval payload

20151217_64e40b134204f34a424c43f43361dd28.js Apr 24 javascript-malware-collection

f9459fd835bccfd939e944a928d21659dfcaec9ff58ff451533a493deda44bc5 O₂(As₅C)H₂(Db₂Po)Md

91% obfuscated eval, C2 reconstruction

20151216_d4ed0c536d8cf5a9891510fd080b4097.js Apr 24 javascript-malware-collection

fbff90f855b26509ffb1ffac09505cc57283dbddb8dc7cee0ab2aa3d2b46dc70 O₂(As₅C)H₂(Db₂Po)Md

92% Obfuscated JS with eval and charcode decoding

20151217_a3a8c46fa920d92773f00351deb25fc3.js Apr 24 javascript-malware-collection

d9a7980a3e0f4d5ce9da49311756331116db2a2a34edbcec61d135397ad8fca2 O₂(As₅C)H₂(Db₂Po)Md

92% obfuscated eval C2 backdoor

20151216_caf0e67ad3933668fa93e82bf4d2e53f.js Apr 24 javascript-malware-collection

744933840e1438f49c7e5a3ecf860111b23df66c92b1add9c74f9cb1625d4a1a O₂(As₅C)H₂(Db₂Po)Md

93% Obfuscated eval loader with XOR C2 URL

20151216_6cbde671fadac28726f0f9e3599c51c1.js Apr 24 javascript-malware-collection

ce1492b0994264ed1148259c276e8b4ae1430936401f40841dce0be556cceef3 O₂(As₅C)H₂(Db₂Po)Md

92% Obfuscated JS with eval and string decoding

20151217_1a76972124b9a39ce3f76eb878d41783.js Apr 24 javascript-malware-collection

9fcbb84a8c5d218efaaa1ac6b258695154c00b6be17ca02c8c4cb47a8bcbca8f O₂(As₅C)H₂(Db₂Po)Md

92% Heavily obfuscated eval payload

20151216_3c6ceb08f413cf063755994a02a9c653.js Apr 24 javascript-malware-collection

df0d74edc43851cc220ebda4308a904d1327fdd03ce42c5f7d59efc4ed676f5b O₂(As₅C)H₂(Db₂Po)Md

95% Heavily obfuscated eval payload

20151216_bcf7a941dcd98efea09f27837640fe9c.js Apr 24 javascript-malware-collection

a93a35d04004a69f95f206c7727de344c2d71774632f64de50c26c4aad10330d O₂(As₅C)H₂(Db₂Po)Md

string/reconstructobfuscation/syntax