javascript-malware-collection · Index

20170422_f4ad44dfca9551cdc2cbe38a81cf78ea.js Apr 24 javascript-malware-collection

2e43cc8ff0378165b41fbcd014e59eb7f36497711f942010613172af24045f6e K(Li)O₂(As₂Xe)H₂(Db₆Po)

83% Obfuscated eval loader with WScript/registry access

20170428_7f48e0a8ad5d92a388049c1ea8b955c7.js Apr 24 javascript-malware-collection

712e3d43a94f73967466cdb547219be90abf7495d736c8afdcf02d536d021c55 K(Li)O₃(CAs₃Xe)H₄(CmDb₃FPo₂)Md

87% Obfuscated eval dropper with C2

20170422_95f0a090cb014a211484ce040fe598b3.js Apr 24 javascript-malware-collection

a58beb268e18fabe9d10b8acb95af511c7d87d492e7c713a4e49f7e070ebf0c4 K(Li)O₃(CAsXe)H₄(Db₃FOsPo₃)

100% Obfuscated dropper downloads and executes payload

20170130_6ba672855e27d6ef3153a1482f239ac1.js Apr 24 javascript-malware-collection

3e5e92cdc148a762d992ad5323b87b358d61b570c7dc606823c3e70f3c09ebdf K(Li)O₂(ErAs)H₂(DbPo₂)

79% obfuscated ActiveX exploit code

20170420_ad0b38af5cd1190540120802822bbe05.js Apr 24 javascript-malware-collection

4b29d4462ff5d00a65112374ab86d2951226443ff9d7dfa75ca6d7fd8dddceda K(Li)O₂(As₂Xe)H₃(Db₅OsPo₂)

88% obfuscated WSH malware

20170203_671786823d3f486e8e6c55a5371cfe3b.js Apr 24 javascript-malware-collection

65ac7e30500436fede3ed17a3fc9599d9ae049e4b3d3e7c80dc759084ba6d826 K(Li)O₂(As₂Er)H₂(DbPo₂)

98% obfuscated WScript execution

20170424_983ed9dcc3881751b2a48a51e3abc939.js Apr 24 javascript-malware-collection

c59aa3e48defd57e2ea1e8250bee294ea443b4d2bfc47249d55042ee0460cb64 K(Li)O₃(CAsXe)H₄(Db₂FOsPo₃)

100% Obfuscated dropper downloads and executes payload

20170425_227d9a091d8156e5ebccab7f76e3f79e.js Apr 24 javascript-malware-collection

21c5b7b824612fc2c8d0b7f1c0a12d1d9fb8f1f0cd6a7a8a2d689488f6d6601f O₃(CAsXe)H₃(Db₃OsPo₃)

99% Obfuscated JS dropper with C2 download

20170310_946474cd9cc88ffed5cf2e12d64b523c.js Apr 24 javascript-malware-collection

30380c731e598d1ca65d3d24392543fe3e792b90abc3cfa7b455d0813d4c232b K(Li)O₃(As₃CXe)H₅(Cm₃Db₅FOsPo₃)

93% Remote code execution via eval

20170323_05a3cc924d4c8c0699f8d72342482e51.js Apr 24 javascript-malware-collection

947e4396463a5536a3b00a676441955c3a50bda959097e11b1115530a91b7ee2 O(As₃)H₅(CmDb₅FOsPo₃)

98% Obfuscated remote code execution

20170225_3557e92ea687a0986e58b05d7751da70.js Apr 24 javascript-malware-collection

b929ff05ce8791e5a58d7c222270d7849ef1c73ff435e691fef14b894e17f4a7 O₂(AsXe)H₄(Cm₂Db₄OsPo₃)Md(Pa)

97% Obfuscated C2 beaconing and eval

20151210_51105b3e324f488476482d243ffbc4f1.js Apr 24 javascript-malware-collection

013f6aac379b7d3390653d935303530e1fcf54d62baea128d1b9c4d90ead97f2 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_eb63ae3287446402ae11c66d9f5e47e3.js Apr 24 javascript-malware-collection

01c305e7b3028dfacfe81114a05fab20bd9071426f8bb42cb9393fe7c8f2c313 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval and char-code payload

20151202_19cc8b325facd37343f3e7ec20d65a3e.js Apr 24 javascript-malware-collection

57431713bd7e782e006d689ce019c2ce9b3a0db5a8ee2849c051ebecd9c1d807 K(Mc)O(C)H₂(Db₃Po)

99% Nemucod dropper with eval

20151211_ba30f1a2a59c1068f7320770d040ebea.js Apr 24 javascript-malware-collection

019e7e747580e84ee64a0ac0aa8e11ded37fc8ecea66229403fd20d6e7f5c660 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_e317a4a404dcddf8a128ee1afb2467ab.js Apr 24 javascript-malware-collection

0639d13fbea6c91c8c9f162f8947588462064a75a8ab0a3fabf511859be304f2 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

97% obfuscated eval execution

20151217_91938580549f5242360aef1054552553.js Apr 24 javascript-malware-collection

1075e812fb20a6881f03ea7cfa86cda340a1925987021541d7517eddfecbf276 O₂(As₄C)H₂(Db₂Po)

98% Heavy obfuscation with eval and XOR URL reconstruction

20150823_85753f646d868bdabc46c21b4cb95f4a.js Apr 24 javascript-malware-collection

109d21bb4ee652346e3b1a4b3bc93f1a0e5202250dbd3ae8519d634cffc85cef O₃(XeAs₂C)H(Db)

96% Obfuscated C2 dropper code

20151217_8baff65303afb6a37c4846f7d5623bff.js Apr 24 javascript-malware-collection

11b55fdc191bb6d32c6abdee43f71dcf4fdae0aa2b99d8b04a05d40ba4a60705 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151211_bc06f0f372870f29cf9977fd046619c2.js Apr 24 javascript-malware-collection

1aa9a8e07e4c068982a2e02a5b2eeb6244abebd31f45ec460c5f23de7e9122b6 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval of encoded payload

20151211_c662bfb62b66e8b68bc28155a463e136.js Apr 24 javascript-malware-collection

1ca1987fde1f2694b0505908a311bd22dabe42534ff44c297cc0722bad1edf39 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_c11a0879912ba9a08881d2c224fe57eb.js Apr 24 javascript-malware-collection

1cd546b6a18d124715e49b25099006d6a6aee9f1eee0b6b856a05ce7c5f1cc36 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_44c009609d8b8e03f531e7feb8484ee9.js Apr 24 javascript-malware-collection

1ddb9c2084263702428bc42bdbe7fea1dfdf2e425d11876df51144af2b204b69 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated JS eval-decoded payload

20151211_dd1c13cbf19a8669e02d0b7c2d4ade20.js Apr 24 javascript-malware-collection

215f078ff64267a47651e212315919a98c01143620a1a5bde231af7278e74111 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_f9e8a9c9120d4be1d952c128dfa438ec.js Apr 24 javascript-malware-collection

265502c06e6ef47523be97ea000957e53bb33d404c105eec624e1c0a675f50f2 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151211_ee15a064cdaff68e93d8d079fc267202.js Apr 24 javascript-malware-collection

32d8f089083d273db1d35ce7e6685e2b941bd9f5b6e718c856c66686b461506c O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

100% Obfuscated eval execution

20151211_b8ec23415125bb09ae3e973a4fcd81af.js Apr 24 javascript-malware-collection

72d688d507c50668c15eddaadff0b74f5ea0016dd4d6efdaf3e0fb7f66ae41ed O₂(AsXe)H(Po)

99% obfuscated eval execution

20151217_cd2c23ad2982509364c73d97292e9024.js Apr 24 javascript-malware-collection

50c5c9cd48762051db3a0173e8e52efc0204001775c07d8b027a0e0956533971 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_3fad7597a70e040a87dfb7101ba27923.js Apr 24 javascript-malware-collection

550c131c696f998981bd2b762e360413e117e47662b6f378cc7e979d31d3b2fa K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_26cf21fb92bb3ec6010cfa6ac3c383ac.js Apr 24 javascript-malware-collection

56a5b1da9a910919287cc032e9864256770d24f7f800cc14b52dd60e6aaf580b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_31c4e36bfb1f02fa53b12b3d696b42f0.js Apr 24 javascript-malware-collection

5bd7b2d74ee4bb80484bce507558f0d9e07f7d7ff4d3afe19cf2cc39d9ca3da5 O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151211_7a857c52f3d814b696187869c01b5680.js Apr 24 javascript-malware-collection

60c880abb323f90ac6cae42b011947243085e32a71268f9d93ceb2fa317cb94c O₂(AsXe)H(Po)

99% Obfuscated eval execution

20151211_8963acb321f35238d99ae6cb0ae7b0d4.js Apr 24 javascript-malware-collection

61020c71d980ff928d9eea80a5b9199b01fa640ce9bcf2460ca2309e709e93e9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_359c7720d43d98ecc397d6f8bf168ef9.js Apr 24 javascript-malware-collection

68c641f751512da789b7054001f37f071bff42341692156f2c5370f68680551b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_4c8170444060ba5ce87b7ce33db2c4d1.js Apr 24 javascript-malware-collection

69dd9abb9a97df940e005445f07d1caae4299fe5b4c372e88bac7c9771277ab8 O₂(As₅C)H₂(Db₂Po)Md

91% Obfuscated eval loader reconstructing C2 URL

20151217_5a1216ce7fe9edc728b772b0d5f05324.js Apr 24 javascript-malware-collection

6abda48524de862a408a21b396d85dc3566e8a4343d35ceda7d9e0266b6faf93 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_eafe57c338e1103d4a3f54633941116c.js Apr 24 javascript-malware-collection

6ba4ddf84796abdcd68c166c7f15dd5452b53ae3fbbfbb239017c496839d28d2 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_a027162bb972e381eb5d3d96bf036081.js Apr 24 javascript-malware-collection

6bd7d7e4689148ae2866b4165a6f54eb6f7920ad4b61b9e987b02f8996aa5aa9 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 payload

20151211_11ebc9aa9d64aa23eaf3b49aa602cb6f.js Apr 24 javascript-malware-collection

6f804e6db8c15bcf7e84fd0d0467a681186d0e1c50e8d8d0ea49bcc6927fe3e6 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_5344be5b67667efe31b22c1d277729f8.js Apr 24 javascript-malware-collection

7766023cca886f148a2dc20a8673c4918dd096b889d53ad2233078e93e434c05 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_e7315b21ef86ba4aae96191662a64809.js Apr 24 javascript-malware-collection

7e997bbc0a85e567a44bd91a05457a5b788af6c19c3f9a37c1239daa9f6b1021 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_410ac98e4105d7364a6210afd4429c02.js Apr 24 javascript-malware-collection

7edad5921ff602cddef5f66deef1fcee0200f375f3379fd07c40bd2083a6ed26 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_b1532097da2d18e847b94ffbfd2dbbd8.js Apr 24 javascript-malware-collection

80fc568ee88923cc62fef2c41830be70b2a2d752d79be639b6093fabc5b1ca76 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_957a645dcfd7925a173dfb88d8c4cebf.js Apr 24 javascript-malware-collection

83bbc900d8f8bb8d79916cd9427f4e48e9ed2be0a7a4a68d1538b53f16a026ef K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_2430c011b7ec510d77ff6d9da20acde1.js Apr 24 javascript-malware-collection

84c917127b2568a82cc19997e5526cea4b5cf049a85b8f4e412fabda117d5b16 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151210_9e7feef12e1fe7d30c29a0bbe8f6e0de.js Apr 24 javascript-malware-collection

854977240cefac1da2d28687c05a0e7b6f6ecebd78282240c49eae064694c5b3 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151211_8ce2d6f19d21c32a0cd2276eb97622b0.js Apr 24 javascript-malware-collection

826347811f56f4d9a4df9b2186b396f6478d31966e2734320f8d562f3bc6f2ca K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_2dfb91849e209fca79d4013263ae1bd3.js Apr 24 javascript-malware-collection

8c55783d57a01dbb55980b080c3a456ddf765c5483032fcf101b096de069c816 O₂(AsXe)H(Po)

99% obfuscated eval execution

20151211_35181b569b11673bae9bca97a3e3b1c9.js Apr 24 javascript-malware-collection

8e35cc64f5db551020050b8f356f7f31ab0dd9f6bfd0d93edc5da4fb25636970 O₂(AsXe)H(Po)

99% obfuscated eval execution

20151217_4a8aeb53552f83e95a19660405833180.js Apr 24 javascript-malware-collection

9babaf7047079cf5702c6346f4a0421481e9f403a0e8a20589812c138c8b60de O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_b9146d057eff86fd38ca1a6aed1964ff.js Apr 24 javascript-malware-collection

9c0ae26022f218a5d6a14e9e791ee8b621204ce058cb49408cc68a5ac0480e69 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% Obfuscated eval execution

20151211_08835639434cc879b4ebbfe62392e4de.js Apr 24 javascript-malware-collection

a562417874c56ff768c405fecb2ab759aad8410c67963c1d910f08ee8ba27de4 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_fddf6c656066d52436807a68c3710317.js Apr 24 javascript-malware-collection

aeebac199de4bfa0cd578f0a724e297bc408c178b44ff235ecb982016647a454 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

66% eval/dynamicobfuscation/syntax

20151211_c4d248e359d696b6ac36ad2102c943bb.js Apr 24 javascript-malware-collection

b5f9af22d1d88dc2891d44e4e0e86aea9acecf51ece31cddfbb3cfadfa469cfb K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_ceaa80bd818d69646820968e3b3abf61.js Apr 24 javascript-malware-collection

b8dfc97f4f638268aef3d794bd79c876995aafdd5a0a17c8e3cb9275e43bb2d1 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% Obfuscated eval execution

20151211_84a50df4be73945426124c146551fffa.js Apr 24 javascript-malware-collection

b9a2ded8b60b8545d1298c326131e7fe6461a394e58fe2926f6f9c66b0e80f1c K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_d13f6b5d1286ff69a7bc06d9349f04cd.js Apr 24 javascript-malware-collection

b9f3577f1038336bb7d3dfd990211f79ec21737f6713370588ca72fb8f1a4d00 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_b8a860fcbf6c20e82ceecc5b834bfcae.js Apr 24 javascript-malware-collection

beb35d32719a772ccf8f9485ece1d3d2e390dc29dbf45b50a3724fecc091fd4c K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151210_8cbb16415242577e05337de32e4bab3b.js Apr 24 javascript-malware-collection

89949787d979d3e29c2f9a3c4038e4bdda6cbb0f6c3e3ad63c7db2397a8d589c O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151217_6db05730abf6c07b04ceac9c0949d04e.js Apr 24 javascript-malware-collection

ca204562bdecb0a4444bfdc1a9404103bf19457b704ef5e3b1ff48750ca90cc7 O₂(As₄C)H₂(Db₂Po)

99% obfuscated eval, XOR C2, anti-analysis

20151217_892bad08bfb08c1cf95e3707d97ee680.js Apr 24 javascript-malware-collection

ce4528bba4f20573f6c4d1d2bea9003600a8b2a0c61db01bcb9bfca341548d20 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_33fd8f033914c8f4f8f4e87657e81a15.js Apr 24 javascript-malware-collection

d7f5023fa48fa8d38f8ea6dc1998bd1535dc96da4a1c5d24c45037f83bf97e7a O₂(As₅C)H₂(Db₂Po)Md

93% Heavily obfuscated, eval, XOR C2

20151217_756649fabab62b199c139f5cc3a79613.js Apr 24 javascript-malware-collection

dd41bb4f64759e8db5f6590a3344ae0c9b6ea94bf7fcf7cd177bd239078a064d O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151217_551400094992782ccd41fb4a8eda13f7.js Apr 24 javascript-malware-collection

df66f8b6dfde6eca27e45f68728171fa293d0e6b970ad9d03ff39ff1bfec5c6a K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated C2 XOR eval

20151211_3f548dd62d59fe60a78cd0452d148458.js Apr 24 javascript-malware-collection

e021eecd19e45edac357f267a66baf3d7af74e9b3c3c06a59230ea5ecee33302 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval-based string decoder, evasive

20151211_2fef2ca4130857ec1c2ea53759df961e.js Apr 24 javascript-malware-collection

e344e5a176eecac722be4bbf35c1d2d9678a47f14a871715216e8eec462011bb K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_eff970219e1fdaa8379d8181d9a0c1eb.js Apr 24 javascript-malware-collection

e3a09da6295d2beed0e4bc2d9b330e96415f770b0b7612b1b11536cc650c3ad9 O₂(As₅C)H₂(Db₂Po)Md

92% 高度混淆，eval执行，XOR重建URL

20151217_9d986643576adcc59b828326712df73f.js Apr 24 javascript-malware-collection

e507cb8ac9c17ab90ebabe66bff9069db502f3f82801b35eda1db4a309615771 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_c03d3eac6a2c48160c3c1cb867077cec.js Apr 24 javascript-malware-collection

e68cf728f9f876530847fa16ba3c49852f671a2ae210db149ee2bd53cad2d637 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_62707401ca54e409acff7160391387ca.js Apr 24 javascript-malware-collection

e7f76da237a37f7d8cda57c71d523f9ad9860693c56d88e559467a05a5005801 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_f171d053f0a9e78302b8e30bcc7b03a2.js Apr 24 javascript-malware-collection

ea93c0507000b111bf6b183515544e7e70258aefc805f696384ccfed5f1c0fd8 O₂(As₄C)H₂(Db₂Po)

99% obfuscated eval, C2 reconstruction

20151217_a1c7941df5619e30d9f4a48ff7a5fd27.js Apr 24 javascript-malware-collection

ee648d821309ec641e746ff265b1417837f7c1ec040124f5f18ff76d89e65641 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151211_bf1c9d8a65fe7f532f3ae234bfb1eab1.js Apr 24 javascript-malware-collection

f047ed7b0bbec9c07503343eb3dea6eb2188a79fad0e7f6df96dd41dab80ebd7 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_191061c51550c5ad107cad981f4d25ee.js Apr 24 javascript-malware-collection

f7aa235ea057ef83180061bfcda0f506b42954de90a05f2748f344d5e261bc31 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

100% obfuscated eval execution

20151217_d66f838d7be3ee440784a4bc7daeb142.js Apr 24 javascript-malware-collection

fdd21c3f666fcf76b59d8280bca4ae50345f806fed430cd31ed175d5e13aeb2c O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval XOR C2

20151210_aa83e56a59a5a38714ea4579b5be6a2e.js Apr 24 javascript-malware-collection

0e1b5745dba96faf6a54db6ed4c4dd29c6e2e0865c7ca0383e9c7704d72b5884 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_1b003452181b36cc4f8579c4b65fa475.js Apr 24 javascript-malware-collection

1239ec24db5a77d9c67d22ad0ef6afc2009f3c4bf6a06a42a333b6a9f7f6a25c O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_22e05a2a76f1eaed3ab7bec4c509c2c5.js Apr 24 javascript-malware-collection

13bb4c4195404cbc1970660f5ffd3477b8ce1c1461ae29619a2d335bbddbfa84 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20151217_16b232a89534be2123837717f6a7ad53.js Apr 24 javascript-malware-collection

16e93b48b69a4125c29ae6e8ecbedf8c8b199297287516403eaaf76ed2b485e5 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, XOR C2, anti-analysis

20151210_cd99fb43f79a29862c4fd4752d01ef0d.js Apr 24 javascript-malware-collection

1c1eff27bedeb7abcb61d110968f394442b0b4d8ba99010b23681c4aaff4e3af O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_e1be5cf84d1a5a70752d8d45d6ebc6bc.js Apr 24 javascript-malware-collection

1f240e61884921b205db66dce61ef41a6cb6aab177779ff024261688fa1ecf7b O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_30f77bc4205016134143cde1a21c797d.js Apr 24 javascript-malware-collection

22c4a2dcd9822091e99e7c3801bdf838e3f4ce08665a6fdf8fb6b53c05256592 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_c7268f5909d43434ac266427c8070730.js Apr 24 javascript-malware-collection

24e7802614e56ab8f339087e75c957dd7793aeb7e48b100d245b5c964061e921 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

80% eval/dynamicencode/custom

20151210_ecee735c5a31972f8a34354768fe6675.js Apr 24 javascript-malware-collection

2a405947607cde60b2f30ea17d7fe1ad9fdf1be5c0713cecbb43e0360442aea4 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_dcd22896bedac63e803f07a676b348fd.js Apr 24 javascript-malware-collection

2ab8d5b751639e2f360a3c1595279e57d96bd084041d863f88f5142bffe74cda K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_17eb1db2338389c6f895c7fcf7bb2869.js Apr 24 javascript-malware-collection

323250267f09ca418c2664ff3877a089f60afe93b2b29ee6f6539f24e430d38a K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval-driven char-code payload decoder

20151210_c6a154e277f113274c8a0bfc0fa57088.js Apr 24 javascript-malware-collection

3cd8d60f2dca8c1e47dbbc649f0305d5e3043558bfc099fd846753855f099858 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

100% obfuscated eval execution

20151210_a5ab449455d17a1886636576bf919b80.js Apr 24 javascript-malware-collection

4f52bea6b608d1fe17a25f15b7158ae4581752811adb145434cc693a8dab6d21 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151210_16287fd370c75e0a0dd67a468c229644.js Apr 24 javascript-malware-collection

52a97debb483ff7170665971fcb549a3b7d229994684c03de05b290b0adb6c12 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_cff6f284ff57d46ee6f66b0533a8752e.js Apr 24 javascript-malware-collection

5448122ce2fb5ebe02a96f3f1d33ec8f3fd1ae864cd104b21ec9f24cdfc00d17 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_d4256ea1515f3ebaeeded81a19591904.js Apr 24 javascript-malware-collection

617bf2f72fa7dce18b247fa401476dcdaf9b6cbf44efffd9d5bca7ab8ff77b74 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval and string decoding

20151210_cbec42cd0d70d9f464b43e845bb761d3.js Apr 24 javascript-malware-collection

628c90656b3c4c4032fbf93f5d3655403ee03c453f30f050e467a6a98e5806dd O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval string-decoding JavaScript

20151210_03a0151c0b69b3d52d1acfe7b4b70e04.js Apr 24 javascript-malware-collection

6fafea41d9340f8c183e572ad2e02250017cbf8ae83508d175848435e2a2f998 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote payload

20151210_27cf4776663b5772b7912e38234c501b.js Apr 24 javascript-malware-collection

722fbd940ea3a5716c89817f85ff5fc4e476a9c8aa3443595af9f7da08a9a2f1 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151217_829ee3ce69f42c1d0d06dbfd3f8288b9.js Apr 24 javascript-malware-collection

792b409d069ffde444df15c57bc36ef742b23f9e928b3f508e7c6b477d3c90de K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 and eval execution

20151210_78ae22e0c1fc0e2ef6d63ca648b565f1.js Apr 24 javascript-malware-collection

89ced1ab865726c52ba2055f6fd99065ca2e397779fa1ab0ec537076d725b616 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote payload

20151217_7fb9d65487b4bf45e6d5caeba3771685.js Apr 24 javascript-malware-collection

8d4fe649344257ba84f64f765fdfbe06fb37339fa25c971bbfe0ee26cba9d69f O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151210_29b4cf362c8249b44a96a0a61f7af76e.js Apr 24 javascript-malware-collection

8f52f8c7dcb5a225990677a30a5529552d99b62e28ffb726c5ab5e08af5c86d5 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval and charcode payload

20151210_0c35f9d715afb6b07bd0f11b6471ab5f.js Apr 24 javascript-malware-collection

941f3d95472149a284b00fb4d59404f9c7693d56835eaccfe6cfe988f4287f28 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

97% Obfuscated downloader executes remote payload

20151210_76131c3ac158d6ada527d6eead4358e7.js Apr 24 javascript-malware-collection

96e6f0726923ab149b05421ee2d1657f945211493937ede3c98207428d6e49f3 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution