javascript-malware-collection · Index

20170302_62a7cd7b44ecf34e189522f1484ba399.js Apr 24 javascript-malware-collection

0057637f7ffdae2ae9ee791283ce8565cc07b6f001e44389f8016dadd9404ae4 O₃(As₃Xe₃S)H₃(CmOsPo₂)

20170130_7ab90b1507bc742c3f211f35b214d9f6.js Apr 24 javascript-malware-collection

c6d14ee277cebcee7215e8198b8ae39fbb709bc2528857c4cc9c0ec5f8493ac6 KO₅(As₄Xe₃C₃ErS₂)H₂(DbPo)Md₂(Pa)

20170125_5b169abf528260f9b818d4d64228e417.js Apr 24 javascript-malware-collection

d475414a02bcf90dda0b670b13b06fdc5b9595c4d5cc094003da9f2e741fdf64 O₂(XeAs)H(Po)

20170125_41de50a7449d34cf6ccc3bd1d4467095.js Apr 24 javascript-malware-collection

f8d43fe186007eb6c7b91505e608affb6398855ea24e046283dc41c57feb12c8 K₂O₉(Xe₂As₈AlCCaCoEr₃IS₃)H₂(Po₂Db)Md(Pa)

20170221_2040be16494f737250b06b1967de9a68.js Apr 24 javascript-malware-collection

853999f6a36522568859950bcf86bf24dd13c5fd2159cc1fae64bf8e036daeb5 O(Xe₂)H₂(Os₂Po)

20170419_fbbda6cb376a740857ed0bec575d930e.js Apr 24 javascript-malware-collection

06d09d9a72587b8c34bfa3d6e7fe92382fad49ab9387d714bc138c3f2be83f61 K₂O₇(As₇XeC₂CaCoErS₄)H₃(Db₂CmPo)Md(Pa)

20170410_9a7cbdaa66ef8e3cbe080c51f72e79f6.js Apr 24 javascript-malware-collection

2b7216b1177ed76c12009ec2224a816d0a2e74a17cf69c19b87163df8b8196f8 O₃(AsCXe)H₂(Os₂Po₂)

20170327_10a99df98343965846c40c89c3f6327f.js Apr 24 javascript-malware-collection

2d8be07741a8a0f6a8788df4efe7ccf2e8bf7cc4788ce41e2784eb94283893f3 K₂O₅(As₉CaErS₅Xe)H₂(Db₃Po₂)Md

20170422_8b227379ae34c5707fa70b2327dab6a7.js Apr 24 javascript-malware-collection

41af1e26407357317aced26d3271c20f7c0053051c1a77c319dd8c61350e63b0 K₂O₈(As₈XeAlC₃Ca₂CoErS₆)H₃(Db₃CmPo)Md(Pa)

20170505_e62ba581f7adf69da43e45cd295b9c07.js Apr 24 javascript-malware-collection

51bd008a8b1f637c71c3bd36e09273557f419c21116337c3883a0cba58bfa60b KO₅(As₃C₆S₆Xe₄Er)H₄(Cm₂Po₃DbF₂)Md₂(Pt)

20170303_7b7ca63d72bfadf876a1800ae472f8f3.js Apr 24 javascript-malware-collection

5a7f1c8e1bdd858406ffae662d40ed54ca2fd0f36cc8476fe37691031081d3bb O(Xe)H(Po)

20170123_86568a682abc06bc6da3d7e6075ade66.js Apr 24 javascript-malware-collection

7553bcb02004cf491cdca36a992802a6e31cab71d7f62aff9ab3c4e4e47f391b K₂O₈(As₅Xe₃AlCCoErIS₂)H₃(CrDbPo)Md₂(Pa)

20170219_ce2f9c1d24dd009d05f0be97c00b28ab.js Apr 24 javascript-malware-collection

842f9d55ddaf3081eb99b19ec6e3a2304b4869385c00a3686e3a5ff7b428e03f KO₄(As₁₁Xe₃CS₂)H₂(Db₂Po₃)Md(Pa₂)

20170301_bf55dc97b611f894f3550515d45a4171.js Apr 24 javascript-malware-collection

8cd65b5c63c43395f00bebeedcf122d0d95ecec7fb5361740d07bbebb61fa7ed KO₄(As₅S₄Xe₃C)H₃(Cm₂DbPo₂)Md(Pa)

20170413_ac9d2fdbb684c00aa1d3f02bd0806898.js Apr 24 javascript-malware-collection

9a9e9eaa48b94c587e7ed6d9e64f882085363ac7b78eaf5d6e6c013d2fbb828e O₃(As₂SXe₃)H₃(CmOsPo)

20170221_5176b10c9a8ea946930fd4b1558ff897.js Apr 24 javascript-malware-collection

af351a4986ad67452073f1a621cab3f8c9e330f191965147b68bda07cb206d4d O(Xe₂)H₂(Os₃Po)

20170117_8ee3104598a7285f26d7694fda5b325e.js Apr 24 javascript-malware-collection

be7b6a5112f7fef0632eb87b5d9a4832b3743b32e13fdff252ae83a40437ec8d K₂O₇(AlAs₈Xe₂CCoErS₃)H₃(DbPo₃Cr)Md

20170506_ecccca5ec2f20a344624f121ede95103.js Apr 24 javascript-malware-collection

bed3c6febfffa39cf88f1b07fa1fc2cf1542e1089c0d42249079826dfaf8b10d K₂O₈(Al₂As₁₀C₄Xe₄CaCoEr₂S₂)H₂(Os₂Po₄)Md

20170117_624e34d0e6825e4c256c7dd6e6182af6.js Apr 24 javascript-malware-collection

e9f9f8f257e8de58e953d5504792c37148a07b4516fc7ea6051ad94bf64add1b K₂O₇(As₈Xe₂C₂CoErIS₃)H₃(DbCrPo₂)Md

20170123_4aad32dfd7247be7d04717e90dc5d2c5.js Apr 24 javascript-malware-collection

f9be460b7aeb8845ac44ae5eaf0dba097eaf7c8ca3eddeffe528ff039af2467c KO₆(As₄Xe₂CCoErS₃)H₂(DbPo)Md₂(Pa)

20170321_1f9962e3782d65de0ca96cc8ea1525a2.js Apr 24 javascript-malware-collection

d716f065f0d45d5884b018c2b13fc9b9b6039f56a8049cdb674907da369f60fb O₃(AsSXe₂)H₂(CmPo)

20170219_2eb997fab8dc4151b2a936fc513fbc07.js Apr 24 javascript-malware-collection

dd5d7b612acf2833712910fc0dfb3102a5a923eab772a0ed822fad96f75a4b38 O₂(SXe₃)H₃(CmOsPo₂)

20170313_0cfcad8dd858daef2558235fa4eeda16.js Apr 24 javascript-malware-collection

bc30225257d2113695c9eeef3b9e71508975fa59dbdf2c37fd3ec1a4bd54e4d1 O₃(AsCXe₂)H₂(Os₂Po₃)

20170313_7648be03dabcb405d754bc9700d28dbd.js Apr 24 javascript-malware-collection

062dab7291ba64380c3cc0cbec0385be864d1e6b50843903dcad92a7fee40ac2 O₂(SXe₃)H₃(CmOsPo₂)

20151211_c1c6fe51376796988317c8b101bd3eb8.js Apr 24 javascript-malware-collection

fa1f55594731f3d36171259d52c9af54a88ede355579e8fc1e627515bc549319 KO₃(As₅Xe₂S)H(Po)Md(Pa₂)

20151211_232e28617ea73d7c217342ce637c8567.js Apr 24 javascript-malware-collection

2bdafcef4026fa63672c6bd30d601f318faa5026e4259574982cb7bfc5e9131f KO₃(As₅Xe₂S)H(Po)Md(Pa₂)

20170507_0d258992733e8a397617eae0cbb08acc.js Apr 24 javascript-malware-collection

4ac099dc7c74b0cd7852c947f3ef370e16d8e9cb6fe2bf8b2d5de94dedba3f38 K(Li)O₂(As₃Xe)H₂(Db₅Po)

20170422_f4ad44dfca9551cdc2cbe38a81cf78ea.js Apr 24 javascript-malware-collection

2e43cc8ff0378165b41fbcd014e59eb7f36497711f942010613172af24045f6e K(Li)O₂(As₂Xe)H₂(Db₆Po)

83% Obfuscated eval loader with WScript/registry access

20170315_a619b6a40c3be963562cbf54e36b45db.js Apr 24 javascript-malware-collection

c9917861f3cc6ec0bdb89a7e32f44e2067f13b0e36d41a8b22ebd5b67331f3b0 H₂(DbPo)

20170428_7f48e0a8ad5d92a388049c1ea8b955c7.js Apr 24 javascript-malware-collection

712e3d43a94f73967466cdb547219be90abf7495d736c8afdcf02d536d021c55 K(Li)O₃(CAs₃Xe)H₄(CmDb₃FPo₂)Md

87% Obfuscated eval dropper with C2

20170416_68b9d93cf2e09972f4a97556d730e2f2.js Apr 24 javascript-malware-collection

4903c81bbc12050439f0e44cf46015afef78fb79fb152c6a6b39305e00e71155

20170422_95f0a090cb014a211484ce040fe598b3.js Apr 24 javascript-malware-collection

a58beb268e18fabe9d10b8acb95af511c7d87d492e7c713a4e49f7e070ebf0c4 K(Li)O₃(CAsXe)H₄(Db₃FOsPo₃)

100% Obfuscated dropper downloads and executes payload

20170309_21da0b1b5d85ae28d30951b11665a793.js Apr 24 javascript-malware-collection

a6d43acd1fc327d08d2defa8d210170b3c4c6e385cdd8c55ed93da03e9654d27 K(Li)O(As)H₂(Db₂Po)Md

20170118_595703f7932e768b66f87860db9eba89.js Apr 24 javascript-malware-collection

041716d652adc5cce7bf6321b1bbaf4b4296331ad8762b1fc433efe08afef184 K(Mc)O(As)H₂(Db₂Po₂)Md

20170118_2fa06b6b85a20c7a7acb593cf3a12656.js Apr 24 javascript-malware-collection

1e3cfd40885a0177f2c1476382881548c7e3a9faca0982fb61590df5a549326a K₂O₆(As₁₀AlS₂Xe₄C₃Er₃)H₃(DbOs₂Po₄)Md

20170130_6ba672855e27d6ef3153a1482f239ac1.js Apr 24 javascript-malware-collection

3e5e92cdc148a762d992ad5323b87b358d61b570c7dc606823c3e70f3c09ebdf K(Li)O₂(ErAs)H₂(DbPo₂)

79% obfuscated ActiveX exploit code

20170427_a2ad7fc45827068fa402cac361b5a0d9.js Apr 24 javascript-malware-collection

01193cdbbb45cbd57815b109b06e048c758bdc3809282fcab0137e59b654f605

20170131_55550f61aa88d3e875498fd6c5f3a790.js Apr 24 javascript-malware-collection

3356b4d06ce345fca7dc8a185f7ecad3065e3489268c2a5c6d586544da39b2a3 KO₅(As₁₀Xe₅Al₂CEr)H₄(Db₃FOsPo₂)Md

20170119_f47ea835414e2b0d12a9755067415fdf.js Apr 24 javascript-malware-collection

34641ab2d5a5d84bcdbe1c8d6c87effc2a2a154627f81fdc0c8702d4363e37d2 K₂O₇(As₈Xe₂AlCCoEr₂S₂)H₃(DbPo₄Cr)Md

20170412_5a0493b8e4e62ae6455d848b644c21a3.js Apr 24 javascript-malware-collection

39d17b3b36a11ff4bf2a02430e98a8ac4ab2a4f51e02c8031cf46c45f0644933 O₃(As₂SXe₃)H₃(CmOsPo)

20170427_661f88e902e0c22a88ef8c53517193ec.js Apr 24 javascript-malware-collection

8d9f07303307300fa69a36b221699dae36f798435597af28ebabb36d5440bf9c O₂(AsXe)H₂(Db₂Po₂)

20170119_8496099966c12d7ae43a8d9d4de7efc1.js Apr 24 javascript-malware-collection

a1f57610e48b37d0079655dc2201e5f9788bffa47b1e02fd245114f01d11151d K₂O₈(As₈Xe₂AlCCaCoErS₃)H₃(DbPo₄Cr)Md

20170427_825fa9f8aef657706ed256436dbc2916.js Apr 24 javascript-malware-collection

ae93fdf5c49361d645601ffa45a6857d0024dfcfe9e53f54acfa0f2c54a068c0

20170415_73d6b4bd5784356627902a42453031f9.js Apr 24 javascript-malware-collection

af7365d57001b5e3f9fc96c7b9656b9f2a3d529df47e7c3e0fe69d52276cb653 KO₅(As₆Xe₆C₄Er₃S)H₃(Os₂Po₃Db)Md

20170119_1954ad79e35cc13f0f0643a3cbaf2c60.js Apr 24 javascript-malware-collection

b19191a8633f87fc4c6cc2b920ecd0138723209d3b5bedb7abc0b6ae986d299c K₂O₇(As₇Xe₂C₂CoDyErS₄)H₃(DbCrPo₂)Md

20170119_537a570379e2d2594a66353cabf26626.js Apr 24 javascript-malware-collection

b3a3b1a39a03a79adaef2d9bfb82289facc427a5d3560233a815c00f4da7892a K₂O₆(As₇AlS₂Xe₄C₂Er₃)H₄(CmDbOs₂Po₄)Md

20170412_62d5ae8d6f8b6891a829d9f2a58d3ab3.js Apr 24 javascript-malware-collection

b4ca13bad62dc95424216a0ea3825bc66174b7373b7a788ad844decf3f7f9d9c KO₅(As₆Xe₂CaErS₃)H₂(Db₂Po₂)Md₂(Pt)

20170415_023174de2f005996573953c9d5f6f312.js Apr 24 javascript-malware-collection

b84daa8dfae87925211564f62cca35200add2b827d9508221d68b613a1ee0e5f O(Xe)H₂(Os₂Po₂)

20170420_ad0b38af5cd1190540120802822bbe05.js Apr 24 javascript-malware-collection

4b29d4462ff5d00a65112374ab86d2951226443ff9d7dfa75ca6d7fd8dddceda K(Li)O₂(As₂Xe)H₃(Db₅OsPo₂)

88% obfuscated WSH malware

20170119_a5653c5ecc08c03fb9e29621117b3e64.js Apr 24 javascript-malware-collection

50498df8ad9da3deead99a1976af60fe7f9545106ad81a391e0c5a1b23140e7d K₂O₈(As₈Xe₂Al₂C₃Co₂Er₂I₂S₅)H₂(DbPo₃)Md

20170203_671786823d3f486e8e6c55a5371cfe3b.js Apr 24 javascript-malware-collection

65ac7e30500436fede3ed17a3fc9599d9ae049e4b3d3e7c80dc759084ba6d826 K(Li)O₂(As₂Er)H₂(DbPo₂)

98% obfuscated WScript execution

20170424_ea90892278c51ebcad2decf61974eed1.js Apr 24 javascript-malware-collection

6b3c05bba6109e66cf7d06e18ec591c89ddf3218a6e20d65f2640ff3391db6d3 K₂O₈(As₈XeAlC₃Ca₂CoErS₅)H₃(Db₃CmPo)Md(Pa)

20170412_ea60cfa75d050d2f7c58234a0c3849af.js Apr 24 javascript-malware-collection

72885fd41a26c39d8f1d40fee7372f61972837df457bb6cd991b961d003f2f2c KO₅(As₆XeCaErS₃)H₂(Db₂Po₂)Md₂(Pt)

20170304_810b89ab9772b0c5f2d1bd8a8963499a.js Apr 24 javascript-malware-collection

8a17a46ebf12ffbe901b7262b1a71f8094d26cb4437c5d7a0924b245c88ed9f6 O₃(As₃SXe₂)H₃(CmOsPo₂)

20170424_156a1010d238576eec0219d666e308cf.js Apr 24 javascript-malware-collection

c047f91ba3715d458a33362b6bb0985c7ed970fb5f66968b9012b53f0ab8606d O₃(CAsXe)H₄(Db₃FOsPo₃)

100% execution/dropper-script

20170424_983ed9dcc3881751b2a48a51e3abc939.js Apr 24 javascript-malware-collection

c59aa3e48defd57e2ea1e8250bee294ea443b4d2bfc47249d55042ee0460cb64 K(Li)O₃(CAsXe)H₄(Db₂FOsPo₃)

100% Obfuscated dropper downloads and executes payload

20170119_202a6366f7b0c3c3e1233763cc2ac19f.js Apr 24 javascript-malware-collection

d2232bc10a71d59af2c05d7a6d51bf0ac5245fbbaeff2174e504d884873decac KO₇(As₉Xe₅Al₂CCoErS)H₄(Db₃FOsPo₂)Md

20170122_38f3734379c19b7bfbb48e9f6ed4ca84.js Apr 24 javascript-malware-collection

decd46caa47ecb8e6c6c56cbce98db4becad3721c077d45e5f8bdb94efb6790f K₂O₆(As₈Xe₄AlCEr₂S)H₃(DbOs₂Po₅)Md

20170119_54c17af0b29af374d4eae3885ccfc073.js Apr 24 javascript-malware-collection

f03fe087dc3da2707f0006c85d79adeb39ea9109ad127d18095b6dd1f77d38f1 K₂O₆(As₁₁S₂Xe₄AlC₂Er₂)H₃(DbOs₂Po₄)Md

20170425_227d9a091d8156e5ebccab7f76e3f79e.js Apr 24 javascript-malware-collection

21c5b7b824612fc2c8d0b7f1c0a12d1d9fb8f1f0cd6a7a8a2d689488f6d6601f O₃(CAsXe)H₃(Db₃OsPo₃)

99% Obfuscated JS dropper with C2 download

20170211_667febed1c61ab169a6677e164d62e5a.js Apr 24 javascript-malware-collection

2d3e6c79eaf580c5091a093915f31765810b6ac0ba7232d9c57b75813b883062 O₂(SXe₃)H₃(CmOsPo₂)

20170127_ac02f835cc57f3f58c788eb66d607275.js Apr 24 javascript-malware-collection

2db838a4bea1e2ce8b496e966ac942fb220ed97f9c82a11421d75fc3d22b21df KO₆(As₃Xe₂CCoErS₃)H(Po)Md(Pa₂)

20170310_946474cd9cc88ffed5cf2e12d64b523c.js Apr 24 javascript-malware-collection

30380c731e598d1ca65d3d24392543fe3e792b90abc3cfa7b455d0813d4c232b K(Li)O₃(As₃CXe)H₅(Cm₃Db₅FOsPo₃)

93% Remote code execution via eval

20170504_5504352d8fd4cfaeaeb788cbecf4ac2b.js Apr 24 javascript-malware-collection

41df91ba56e57a942ace94db5193ddad79c69eb4c9cca9b698d676b8bd61c4d7 O(As₂)Md

19360630_3aaaa12047363293f30cb7bf787a7f07.js Apr 24 javascript-malware-collection

443b816b66243bc86a3b07939e4d44bfce953a812472ce431fbe0a00b2e3003c KO₅(Er₃As₇Xe₂CS₅)H₂(Db₃Po₂)Md(Pa₂)

19360611_23f5eaf84cedb0998e31b34a5f81e4ef.js Apr 24 javascript-malware-collection

57fc50d296ebc143c6e4ae4233b7b1d05144456c93c7c8b8aacea4b9c4921018 O₅(Er₃As₅Xe₂CS₄)H₂(DbPo₂)Md(Pa₂)

20170425_b285a3b12d409401935ac3e83139f638.js Apr 24 javascript-malware-collection

5a12f6c36563fd381ffd577604570b51a8ee5a40c1c8aca07dbd7e16c22bd3aa K₂O₇(As₈Xe₂AlCCa₂ErS₅)H₂(Db₂Cm)Md(Pa)

20170503_8c12ccbd0edaf990cfa2b47eb9d3e60b.js Apr 24 javascript-malware-collection

6a96b466b29f47935ad692f24304c83e624faa90289371383b1c713661288a68 O₂(Xe₂As₂)H₂(Db₃Po)Md₂(Pa)

activex/com

20170504_ef06c4204f609e446665c7dad0db15cf.js Apr 24 javascript-malware-collection

744f4288e17324a470d00a7241459f05f25a6d5941b95a1940991220ecc00b69 O(As₂)Md

20170407_dd1a8a2f582254c152a1e68bbc0c7358.js Apr 24 javascript-malware-collection

8053ab96ad2790f92bb8155f15a0a7b6b812ee11e6a08b788b9fe1b9b6589b45 O₃(AsSXe₃)H₃(CmOsPo)

20170202_fd62ce23cc6f4d5aa5f37369d7be95af.js Apr 24 javascript-malware-collection

91edfdb1b5e4670227624c59ce877d3daed0507533419d5cecde1e692e91c2bb

20170323_05a3cc924d4c8c0699f8d72342482e51.js Apr 24 javascript-malware-collection

947e4396463a5536a3b00a676441955c3a50bda959097e11b1115530a91b7ee2 O(As₃)H₅(CmDb₅FOsPo₃)

98% Obfuscated remote code execution

20170323_b3018774124112316c42a60f375db228.js Apr 24 javascript-malware-collection

a3d179e2b0b5c4db960fd1174d4691c27a5d5d81ff217f8121ce9d5a337477e9 KO₅(As₉CaErS₄Xe)H₂(Db₃Po₃)Md₂(Pt)

Информация\ о\ заказе.2019 0807.docx Apr 24 javascript-malware-collection

ae771418cdcba682dd1beafa62d6a6a2505b74748bbb61ed4b666332cafa3527

20170225_3557e92ea687a0986e58b05d7751da70.js Apr 24 javascript-malware-collection

b929ff05ce8791e5a58d7c222270d7849ef1c73ff435e691fef14b894e17f4a7 O₂(AsXe)H₄(Cm₂Db₄OsPo₃)Md(Pa)

97% Obfuscated C2 beaconing and eval

19360716_651cabb5c73e438af661f671507361d5.js Apr 24 javascript-malware-collection

bdf31404c58fdcb1133c236bdfea8b9918dc9626170097f4600e57e91d780ce3 KO₄(Er₄As₅XeS₂)H₂(DbPo)Md(Pa₂)

19360701_446c88847493ce78b655e517e2a5d081.js Apr 24 javascript-malware-collection

cf93d24f0b8d82a7cc20b99c5d6eb5e5043d6ac66229a80f2d5f965429a55f19 KO₄(Er₃As₉XeS₃)H₂(Db₂Po₂)Md(Pa₂)

20170215_e64eea9d7c432055963c788b4fc34bf6.js Apr 24 javascript-malware-collection

de62f34bf1ef7649b0893cb10bf4e80132fe5e0caf093a148c9877b45e36df77 KO₇(Al₂Xe₄As₆CCoEr₂S₃)H₃(Po₂CrDb)Md

20170504_2d857bd5aad2490e289916e54539eae6.js Apr 24 javascript-malware-collection

e07e276dd7d418d1ac890fc27b4d346c43891271dca00975365f35acead27636 O(As₂)Md

19360701_13d0fc4e5e75d0b28010330002c4f19b.js Apr 24 javascript-malware-collection

e8d8bb46863133ae5d877dcd1ba32c61910119ac86c6f5d7dbeb8c57a864d3a5 KO₅(Er₄As₇XeCaS₅)H₂(Db₂Po₂)Md(Pa₂)

20170118_e2e16d7c80ecd56b18d8b159cfda06bf.js Apr 24 javascript-malware-collection

ef79ab1c31ac8169a0e018890985fb56f6768858bcce9c08276b13bbda33d933 K₂O₆(As₉S₂Xe₄AlC₂Er₄)H₃(DbOs₂Po₄)Md

20170322_4aef2f2f6b431c204b5f11e4e2b29229.js Apr 24 javascript-malware-collection

fa73524658d1c2675adfb689fa33c8accd79a90f55cba6e2fa8bc2ac6fccdb8c K₂O₅(As₈CaErS₃Xe)H₂(Db₃Po₂)Md₂(Pa)

20170215_f43d1f97ead6535e3f641d383d7f3af5.js Apr 24 javascript-malware-collection

fb42ff2308b8605742a23aeaa1de752b422ac3cd5ac4a08682767a0283f0650c O₂(SXe₃)H₃(CmOsPo₂)

20151210_51105b3e324f488476482d243ffbc4f1.js Apr 24 javascript-malware-collection

013f6aac379b7d3390653d935303530e1fcf54d62baea128d1b9c4d90ead97f2 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_eb63ae3287446402ae11c66d9f5e47e3.js Apr 24 javascript-malware-collection

01c305e7b3028dfacfe81114a05fab20bd9071426f8bb42cb9393fe7c8f2c313 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval and char-code payload

20151202_19cc8b325facd37343f3e7ec20d65a3e.js Apr 24 javascript-malware-collection

57431713bd7e782e006d689ce019c2ce9b3a0db5a8ee2849c051ebecd9c1d807 K(Mc)O(C)H₂(Db₃Po)

99% Nemucod dropper with eval

20151027_af35d08628727df846d5db186ef2c079.js Apr 24 javascript-malware-collection

bef7c277ac1fd8c046193d7c1ce6720afce09deb0d0c5248f394be5a572ac193 O₂(C₃As₃)Md

execution/dropper-scriptdelivery/download

20151211_ba30f1a2a59c1068f7320770d040ebea.js Apr 24 javascript-malware-collection

019e7e747580e84ee64a0ac0aa8e11ded37fc8ecea66229403fd20d6e7f5c660 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151217_c3f31f12a6ff8154b8d685c0be7f40ee.js Apr 24 javascript-malware-collection

052ac03c257869348950e237dd0996d530daea5e8434465b6a5ad14a4176dd2b

20151111_d761ea8b891f99e290e4d2963bffdd7a.js Apr 24 javascript-malware-collection

05a7edacfb464f005298196a70718c17bb291e6df79e3f862707e94698d3fefa O₆(Xe₂As₇C₃S₅AlEr)H₃(Db₂FPo₂)Md₂(Pa)

20151211_e317a4a404dcddf8a128ee1afb2467ab.js Apr 24 javascript-malware-collection

0639d13fbea6c91c8c9f162f8947588462064a75a8ab0a3fabf511859be304f2 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

97% obfuscated eval execution

20151217_ebe21b9c6aba7b3cc5119b5dade6f325.js Apr 24 javascript-malware-collection

0b4d8f59dc3cb37773ba5b55cde69b214123cce2687f404347994ef8e2edbb8d O₂(As₄C)H₂(Db₂Po)

string/reconstructobfuscation/syntax

20151217_91938580549f5242360aef1054552553.js Apr 24 javascript-malware-collection

1075e812fb20a6881f03ea7cfa86cda340a1925987021541d7517eddfecbf276 O₂(As₄C)H₂(Db₂Po)

98% Heavy obfuscation with eval and XOR URL reconstruction

20150823_85753f646d868bdabc46c21b4cb95f4a.js Apr 24 javascript-malware-collection

109d21bb4ee652346e3b1a4b3bc93f1a0e5202250dbd3ae8519d634cffc85cef O₃(XeAs₂C)H(Db)

96% Obfuscated C2 dropper code

20151217_8baff65303afb6a37c4846f7d5623bff.js Apr 24 javascript-malware-collection

11b55fdc191bb6d32c6abdee43f71dcf4fdae0aa2b99d8b04a05d40ba4a60705 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151217_4df823cf7e4817a2a6a07b2be8916960.js Apr 24 javascript-malware-collection

13486dd5aff9169dfc2f53aec4f11e8e73fe5cd652fa6b160dc641d0df28e31f O₂(As₄C)H₂(Db₂Po)

string/reconstructobfuscation/syntax

20151211_6726de71345009be8524bde18d91b0d8.js Apr 24 javascript-malware-collection

1a1665fac9048319545f8d1dfc73bdb12a072489e1281bd2d5b59c1f616df457

20151211_bc06f0f372870f29cf9977fd046619c2.js Apr 24 javascript-malware-collection

1aa9a8e07e4c068982a2e02a5b2eeb6244abebd31f45ec460c5f23de7e9122b6 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval of encoded payload

20151211_c662bfb62b66e8b68bc28155a463e136.js Apr 24 javascript-malware-collection

1ca1987fde1f2694b0505908a311bd22dabe42534ff44c297cc0722bad1edf39 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_c11a0879912ba9a08881d2c224fe57eb.js Apr 24 javascript-malware-collection

1cd546b6a18d124715e49b25099006d6a6aee9f1eee0b6b856a05ce7c5f1cc36 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution