javascript-malware-collection · Index

20151210_c035823b56b0611c041048c60145f3b6.js Apr 24 javascript-malware-collection

97b2e7db6ede9458d3991666c4c7ec7d8061a8b096d27f53049b8d4538d53c37 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval-driven string-decoding payload

20151210_6c9239ebd81824662eefc25e14bdfad7.js Apr 24 javascript-malware-collection

a1c0e3f7f6c961858a844bf71f9c140ae270d71851bc72e2c1b55521249e39f0 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151210_c379cb4e22b53ddb88f77b517727e040.js Apr 24 javascript-malware-collection

a845a66054ad2467e575859df2e67e5783e6f147becd09dd379230d30688d958 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_f0c9f56f993e5357e45e093e85f7b984.js Apr 24 javascript-malware-collection

a8743cc87d05c9acbf0d13162daef00bf4c6fb801515a43bba0acd55d70f81a3 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_f6c10edfb18ccb70d0bbc2b5444e7ac6.js Apr 24 javascript-malware-collection

ad0f047b43abbf8fa681a4173ef117c56889079c606bb0b419435c0906f8a04f O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_80c425b32437862e2c0186484867bff4.js Apr 24 javascript-malware-collection

ad1104b5800e2b16e33e221f04aa9e9b6fb22bde57811fa45ddfc358932ef5a5 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151210_cdaed1d0ebb4c23a210b4cf10c651f9d.js Apr 24 javascript-malware-collection

b91df057e25ed4fd3f35637ad7822dc50908fd77b0d0143e661f2dc490ebe8be O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

100% obfuscated eval execution

20151217_bce197afa893a3bb9988d6ad6caac3b8.js Apr 24 javascript-malware-collection

c2210c6bdaf4c83b8589d3d24f85eca2a73c222036400bf15ca52d8b79b39fa3 O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151217_032c3f42c1b4f97d5701a8d451a575e1.js Apr 24 javascript-malware-collection

c3851badd628a444f10d66730e83eac3a9aefe8f3d6e38fd78fbd60af1d25e99 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_5579d0aadf733ab58c109feaa5355107.js Apr 24 javascript-malware-collection

c4064a2e6c939dc940b85353b9e8126dad961c30692b57e9b8b3e1d437e6f6cc O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_540ebd547c56da45c474f559b4975c9b.js Apr 24 javascript-malware-collection

cbda9ee3ba5f82a3ecc93877bd6bccd26c61ca3174a057a797ba08b0fa2e846f K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_9aec8d2972e552464e05a1b85c8f1cda.js Apr 24 javascript-malware-collection

ceaef979049f341337df6851d0238e218ee4b0716fa23cce8366811c1e0f891a O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

80% eval/dynamicencode/custom

20151210_93a57752ad54e8a5f39e74e031ac3da7.js Apr 24 javascript-malware-collection

cf42ea08dad0c1b3c5facdad28c939cdea276c7c32640be1fccd51db69b453ca O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

100% obfuscated eval execution

20151210_ecbb8a372c26f39e2b3647814844254a.js Apr 24 javascript-malware-collection

e96a72f7cfb01bf2eb3cf82d7a97e1d0377d68ea7bb3847f0a9a90bc1c72e786 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20151210_20ba241a725fc1f849e4cfbfabaa5243.js Apr 24 javascript-malware-collection

edc8bb1fe82d75b52ec7bb16dbd53812584b20e003eff6a929d2d0ff647e0070 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote code

20151210_972fa023665b091f5c83a87fcef75244.js Apr 24 javascript-malware-collection

f68f7480751147cedced37f142d130aa3674a2857578d14849d570978e9efadd O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151210_b8c756d71e275669f9381cfc5152dc07.js Apr 24 javascript-malware-collection

fe34358d5773b6e7fd1139e69ef8659f74265c80729d40c07f28b98cf906ba5f K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20170318_988f8f08e0ff0692ad227bd02be36710.js Apr 24 javascript-malware-collection

255f0e8e11bbf0c37f15d91e9fd4a36cd5c0cd62c8fe084a2fa9b1259b0b26bb K(Li)O(As)H₂(Db₄Po)

83% obfuscated payload execution

20170426_e8c22b6617d3dac5fd428689ff796af3.js Apr 24 javascript-malware-collection

5924ebdbc35d2aa20925d3d7f2de935bbb76d706eceb9a267be7f9d6e7a2ef18 K(Li)O₄(As₃ErIXe₂)H₆(Cm₂Db₈F₈OsPo₄Ti)

79% Obfuscated WSH dropper with C2 and execution

20170309_527ea84738202cf415cad1e786c87e0a.js Apr 24 javascript-malware-collection

ec7ada279c4a08db4eba1949cf5fccf2c5579142d96961e24f53af9968f10bf9 K(Li)O₃(As₃CXe)H₅(Cm₃Db₅FOsPo₃)

93% Remote code execution via eval

20170421_f23d90e6e6dd6cae96f15206722d9c81.js Apr 24 javascript-malware-collection

4bfae0ef472ec32fb95b7794ecd2295ef9be2a17ed07f7fccdc31851a54a709d K(Li)O₂(As₂Xe)H₃(Db₆OsPo₂)

88% Obfuscated ActiveX WSH eval malware

20170419_8e2474f8a75c75a681a775290ab221c7.js Apr 24 javascript-malware-collection

ee5a47ac2e76e65291858f75c9f58eba157e5c130720120e6e278a89a2088b3c K(Li)O₃(CAsXe)H₄(Db₂FOsPo₃)

100% Obfuscated dropper executes remote payload

20170426_6d9bc15df6dc1f12c4d0fa4773c99be9.js Apr 24 javascript-malware-collection

e9e469993c7e256fe99d84a99c74c4580a917fa8980db032b3441a293ae6d8c8 K(Li)O₄(As₃ErIXe₂)H₆(Cm₂Db₈F₈OsPo₄Ti)

79% Obfuscated WSH dropper with C2

20170403_5cc0758c10bcfc404fa32b99af73bcee.js Apr 24 javascript-malware-collection

a62712ff422477b15e512d3d83285d61c760c468e8f8bae26a7e5f0174e57db9 K(Li)O₅(As₄CPSXe₂)H₃(Cm₆Db₂Po₂)Md

98% Obfuscated PowerShell download and execute

20170403_d6696bc03a2d2db88c8865b0040ebe4a.js Apr 24 javascript-malware-collection

faad4f8730db9825cfc5fd29f105a16849c83e61e836d68b2e3eff55fe0f1ec5 K(Li)O₅(As₄CPSXe)H₄(Cm₅Db₂OsPo₂)Md

98% Obfuscated PowerShell download cradle

20151211_254fc290eebe4ea7fa77f6cab112dced.js Apr 24 javascript-malware-collection

177e9e57d490f26d8e9987e768da39484e1f5c26edbcdd3932382e0811855938 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_1dabc836d41b57930eb07a80581149b9.js Apr 24 javascript-malware-collection

42b1bbf187d3bbfac05899d1cdd95bb47508f490fedeb48e641218425faed286 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% obfuscated eval execution

20151211_d1311282605bbb49aea62cd08ee287e5.js Apr 24 javascript-malware-collection

589c7445fa650683717c820386f4f30fa3e724c6e1ca1802f92929bc312ca631 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151217_9e6af02f3c36e856ecb9f56bc1d671c8.js Apr 24 javascript-malware-collection

62874ab5b337734e9b8251b8ef3a6c97bc82968cfaacd73a33b627802ceb78f0 O(As₃)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_d9f6af9f47d17bc88857a3f38e4bdc6a.js Apr 24 javascript-malware-collection

7fe1c27d447bb06aa8741298009cceb87da9e6474bdc74f0f4938d2a796dc83d O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% Obfuscated eval execution

20151211_143b34a2917bc86fcc896ebe75053861.js Apr 24 javascript-malware-collection

9fd5784116203c382abf2af729bcd165d04f80a797fe13493c34e19e0b2bbe70 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_9913dfef67adf395ba1d949597fd3908.js Apr 24 javascript-malware-collection

a1c63073ac1f8da28175e5d1d049a2f43324dd64b5192ebdba49eca8336ce8ee K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_2e14e61daf49ef7d2a1240241d7030ea.js Apr 24 javascript-malware-collection

a90be37101f03fa4293fb7d4b3d1203689feaaeb5b18b548b166fde7db45b4ca K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_77513881aa601645e422099b030b04a0.js Apr 24 javascript-malware-collection

b33b0513226d637346fa5afe49f21355eaeb2514d15f63afeecbc47aa792be07 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_cd3ca8aad503f148ab1627584f32c958.js Apr 24 javascript-malware-collection

f495985059985aa304bc3ee1ee55ad20a80772e442c774da688b6b75bc36891a O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval, C2 URL reconstruction

20151217_3eea452bbe88587326a2fc2aa94d6f6a.js Apr 24 javascript-malware-collection

f94f652669b184b6ac654f01ab324b11c35992c551a4ab353e0020354e1088a1 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated C2 payload

20151217_6ec90542afbd0905e5ab213a1ccb7d02.js Apr 24 javascript-malware-collection

ffe3dc1fc89379ae7cd7356628325f7e8744c3f2f72f1e69e01ceef6c617f839 O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval, C2, anti-analysis

20151217_150e9f53a70f36ee6336389eeb1acc94.js Apr 24 javascript-malware-collection

13466bc21d46c7f5cc503868d2492be9c36da4f7949820cdb146614bbbc79e81 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151210_754aeabfcec13095d6d3aba659ddda3c.js Apr 24 javascript-malware-collection

6a124688feec4c6455a6d698e75b05e1876a076725550a683a549b5bead190ae O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_5fb560ce044e0d2735045451423eb0a6.js Apr 24 javascript-malware-collection

9299359eea86ce2d12c2c7a6181097f7ce7f1ef876749c56e8fa2ea370641598 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, XOR C2, junk math

20151210_f941fbb3bdf0d323fd97b18bea5e16b9.js Apr 24 javascript-malware-collection

c12555fdccf28962a62332b69bd313707541d02c7861d13faf97168b3c2e2648 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_4d04a6f836135d02d11a911505b4a740.js Apr 24 javascript-malware-collection

d326d90b145b55a0466fbb5213e3105afa621a523569b6b8dd1034a74cfc22cb O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_f8f759925811caeb709e81652584a7af.js Apr 24 javascript-malware-collection

da8d949801924a97ebd09be4152fa7c1ae9004cb4b58ffa6183ef095645dcd4e O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20170506_31f70631beadb9272ddd0cd71c2e811b.js Apr 24 javascript-malware-collection

1cbeda76aef77c5119bab4a676adc3148e14e7be883673e0d4e04c66feec5a3d O₂(Xe₂As)H₂(Db₂Po)Md₂(Pa)

89% obfuscated eval, ActiveX creation

20170223_2f30562531561e4a1e6eeeaddcb73781.js Apr 24 javascript-malware-collection

3e8a067e193b9c18813119dcef93e84958835243c618a9cf334583a62e819af3 O₂(As₆Al)H₃(Db₉OsPo₄)Md₂(Pa)

100% Obfuscated, evasive JS

20170429_44e48fdaf95ed83598d3f349bf9f725d.js Apr 24 javascript-malware-collection

13e9f492095bed1e72f2f59c739e7c11af1818e1170f1bd37641bb8212d68a8e O₂(Xe₂As)H₂(Db₃Po)Md₂(Pa)

88% obfuscated eval, ActiveX, evasion

20170418_25b22140b6ec655fcf23fa5e83f3c788.js Apr 24 javascript-malware-collection

1cbf2e426b17160da0545785df740c6d2785237a140cf1e2ba42545ab3890a8c O₂(CXe)H₄(Db₃FOsPo₃)Md(Pa)

96% Obfuscated dropper, C2, eval execution

20151210_d762f56876bba28b8f53b7bc65ca61f7.js Apr 24 javascript-malware-collection

5f9c59af98a739d4601641ef717b1916a35be64e66efb70c21bc90d96754c573 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_15e4d7f180e0ef29e680da64494d8884.js Apr 24 javascript-malware-collection

350d4be6b46eb9095ff69769f891688fa159464fcb9767d67c66ef7b3fdb1cde O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_6fd32a5c53d0475f62a08b969f9c12b3.js Apr 24 javascript-malware-collection

f2dc4b8d2aa24fc9b5b8031c8d163eeeee5c0b4ac679ef2efbb40778ab19b1ef O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_5347b383f56c88a4ed250d629138f060.js Apr 24 javascript-malware-collection

d4b50d57f98049e079f3e3678d9ef638dba33bdfb4428dbc4f4d19a74abbb6a5 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151210_d2fb124ab9a200b1388b522c2ff3b6f8.js Apr 24 javascript-malware-collection

1b7a7bf62edae0d83e492aadf03ca4a46fc125038c98a2ade427e91983e4a23e O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval

20151210_c34ea69997b8fbaa025a70dca14aad07.js Apr 24 javascript-malware-collection

13795e7a295cb6099fbcf43bfc8fab89ed88ee1f76d5fdbe32718a4048327c4c O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_822e07515cd891660d2207c23c953ed3.js Apr 24 javascript-malware-collection

28345e804b039f9b61c91c856ebc9fe4b4462fe027b19355de4903289e473cc0 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_8f8583d7f5cf476d185446edfaf8f113.js Apr 24 javascript-malware-collection

3bbaad0b42d9095d84dd78574ce07ebc5441f9b2bf7a21d57c0f9c76564c4528 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval char-code payload

20151217_8e5530306a72f46bdcc83acbdbd1ae2b.js Apr 24 javascript-malware-collection

fe6ae73553460757f4a15117baff228137584fdb83fb267f6af050e2bd531d6b K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, XOR C2, anti-analysis

20151210_1ad2efc0457eed3afe2873c83083b55f.js Apr 24 javascript-malware-collection

a605e04f1c6dc243f648e8d4741c708d46cfec3f57f1b751589e68c50cb446ff K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated JS downloads EXE payload from remote host

20151217_5bf0841db9c67698879b9aa516d68ee1.js Apr 24 javascript-malware-collection

90d16fdd4798000234df035d2666b1fdcbdb92bdd2f2073b7254a0d96c0baa19 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151202_bd01efaa49c705420b7c530b71b5fd5d.js Apr 24 javascript-malware-collection

312b3d5e220ea5d27761eca7af4d321f540c7484adff38886d03277688e8cb66 K(Mc)O₂(CAs₂)H₃(CmDb₃Po)

99% Obfuscated dropper downloading executable from IP URLs

20151211_1a02e50c9c4ef354787edc48eaccaa2d.js Apr 24 javascript-malware-collection

523c5ba0c3171437cc482257d277fc95b3c233ee2f824482f8f903decfb16775 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151202_52a380094169443da7e9c51eede85d7c.js Apr 24 javascript-malware-collection

fa762457b9c0e0a7671af4f8a344c1d228164f0cc9041f926ebd9c90bad5f3c6 O(As₃)H₂(DbPo₂)Md₂

95% Obfuscated eval dropper with ADODB.Stream download

20151210_9dbb8e2ff49b0f9c7e4d4fc59a08a0c0.js Apr 24 javascript-malware-collection

0d5e86835ef5ffb5e735aeb48c47a2552d2959ccf46e4f6753ae80ddf1cfd883 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote payload

20151217_ed4b03f76122854e8191429115052f1f.js Apr 24 javascript-malware-collection

117f51da7cabe4bec32bfb5e5fb83f6fbc4c07dbb507fae23948df61610fd0f1 O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval-driven charcode payload

20151217_7795e67e398666a750c03f4912854e75.js Apr 24 javascript-malware-collection

1de20d692709f53474ad21dd17b848d835312d599604ac2ea2ff32f568709c35 O(As₃)H₂(Db₂Po)Md(Pa)

100% Heavily obfuscated eval payload

20151210_fdcff6c4b2aa22278a07e6af4687727a.js Apr 24 javascript-malware-collection

7d9bdbcb9978c09318c2acaa4cd36c86ee55cd7fdeffdedf866a4dea8ec9247b O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_cacdbc5e4f3e1a3d2853828a98583fae.js Apr 24 javascript-malware-collection

7ef18182d2077b15259f0f1d0db5a1e867ebe609350bdd9b11a71aa1f743aff7 O₂(AsXe)H₂(Db₂Po)

95% obfuscated eval execution

20150910_356190b49fe4d3245cb92295072005fd.js Apr 24 javascript-malware-collection

d0f9d8197b3b041e581fab58ae760c2e6c39ffd29c8c90739d4d7f2b598448b4 O₂(As₃C)H₂(Db₃F)Md

78% Obfuscated C2 and file write

20151210_1978a6c2ff79e773c7f9be4526951083.js Apr 24 javascript-malware-collection

ec5755be274014b02d1f137366f9182bc82f4a3ce3c1f22b7ef83ec403f79816 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_919177e68e3c9c4d65cc630497b2d269.js Apr 24 javascript-malware-collection

f4ca654bb226879ae532e0c8a1037ce3a49c31bbae0d465b48c4ae6d746ce675 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151210_4ac6df1e0fcc3eba789192df9076c1c1.js Apr 24 javascript-malware-collection

0927a412fc486fd0d5f749834524c4517426d434ac895f73d651ef48b170c039 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_6e1a5e91dda2bf1b5801f621934e51e0.js Apr 24 javascript-malware-collection

d13962b13c0464d2b17e6d997757d31bc0a335aecce983a87a791dcd27a3f5d8 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_c1de7f210a45a2858b3c3aa2f3916f5a.js Apr 24 javascript-malware-collection

5d39560a85a75a9d66d9de50a1c49c4036d2445f992bfb7144795543e558b17f O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151210_06d3b44c0d95eb73c69f1b8f4741d4e8.js Apr 24 javascript-malware-collection

00627d6ce2991d24ee5f9a32b7fccb71f04e59970e6fb6a18ac2476bd639fe68 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloader fetches EXE from raw IP

20151211_6be29a772594c7402e1b5af46136df48.js Apr 24 javascript-malware-collection

0bcfa3caab846a7688f2023a23394a01f106dcc9d1542b254917e4c4dff07339 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

100% obfuscated eval execution

20151210_42d53a1b17607eebcb71f946b479c26a.js Apr 24 javascript-malware-collection

7d1cc3aa956e166dcd63b6b054c8d0ac44169130494e8f88edcfa07404835ce8 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_8e3022041665cf3904ce11e97a16ed7b.js Apr 24 javascript-malware-collection

0734d99b39b205243f56c432aa319552e543a56a7a4c43d750e1d57c708746c6 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20151217_05d9126aa45e58f1c2377027d6e4549a.js Apr 24 javascript-malware-collection

35841a57bc7cf4a49ec8438babe7308b1e29736e479438a1ee9053ef2f602bb6 K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated eval C2 payload

20151211_4158e553b8de94bcfb2735f4ffee7a13.js Apr 24 javascript-malware-collection

3fb0381876fcf05ce1b2d39925c690807320f79b05037e3cc4884c6e59e5728c O₂(AsXe)H(Po)

99% obfuscated eval execution

20151210_07cce78f2b925b118dd0cb92a5222dee.js Apr 24 javascript-malware-collection

5bd88af5e244f7f73f09a26c72006dd8a3c551fb2565a7e55415a51e6481c1ed O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_295ebb9a854149b10a4d6defc9f9ae26.js Apr 24 javascript-malware-collection

96c7c28c6855f54b5a0281d1e4df4804ed3695099477c53d60cd12025c653b82 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_02bc40d3fba2284bcd5d41cc10029668.js Apr 24 javascript-malware-collection

27bff3b4831ebb298fa82377e09356a0361ea04234fc4fbb1154923673020608 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151217_468937e0eb5129ce53ef6c12dc85a6ea.js Apr 24 javascript-malware-collection

690f89490fc8e4d26f91c0ab8d7bbccae809e0f83a374a3afb07982306a34111 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151210_f2b5df75ae0cdf3b3ff76e8ab2b9bf80.js Apr 24 javascript-malware-collection

1b1dd946dc62dad6cba378a209dbac7993ed9bd5d155bfe180b06c2cf04a4868 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_c5563a9108b9757d43f879b42208f524.js Apr 24 javascript-malware-collection

b01a93266aec69784808a86fe37c53d60f52cea2f542f68975c757c4a6d8bddf O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% Obfuscated eval downloads executable

20151211_ad8774f600089b87d1c522d660887f3b.js Apr 24 javascript-malware-collection

d983c0fe651f18941fd1459839a737f52687fac7379099792bb2706646c09e7c O₂(AsXe)H(Po)

99% obfuscated eval execution

20151217_62409c104b51c7ec240249e7029b1f9b.js Apr 24 javascript-malware-collection

dde710ed0e8c2e015359738d098dc46acedf1595e4fd85a5ae3da430342ba281 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_de80cc6ca045a25ad0d6771f678e6744.js Apr 24 javascript-malware-collection

de6b48e12a15e0e8eaeb6c2bb32adfdb0bd983569daff3f9a6807504e8ce2a7d K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151211_a481916cd8070e13c60395aa39ac3d5a.js Apr 24 javascript-malware-collection

244ecba18b9f410e31691f89255fab52d5939f98d7ff689a925be662cb9a0d0b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_a9065f35f166295b18e110ad14f01f90.js Apr 24 javascript-malware-collection

45f80de00f30767bb5fec5edff425e49012ffd3747af6fe0f61c27f4dbdb68d9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_df7af2b9d8d39e685ee394038bba2a40.js Apr 24 javascript-malware-collection

6542f06fd38de4d08c752b05451793a1eda22288c7b779da5b241ffe722d5ea7 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_a8fc26686136be052ae73fba83838ce9.js Apr 24 javascript-malware-collection

73680f97c14c81cacef2a041ba5fa812222caf2b38cfc7bdd3b5fff943d7a57b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20170415_4fa8eb9edfebab3914421c3623516ba6.js Apr 24 javascript-malware-collection

0100ab900130f7af747656a0d3fbe84b0c17273bef304519ae7a02974a301c8c O₂(As₂C)H₄(CmCrOsPo₇)

82% Obfuscated PowerShell download cradle

20151217_a7da67aa4556e9d5c600965679e29931.js Apr 24 javascript-malware-collection

fd2cb928782452a16c70075e2372bc88aa1a1d9aed20a922fa67b4d9da22de1c O₂(As₄C)H₂(Db₂Po)

99% Heavily obfuscated eval payload

20151211_bf04b7b8aef53cef6d62c4f72de59df9.js Apr 24 javascript-malware-collection

d9453cc4cc7a5dd40e96676dc901d8aab09f23b7d5df0d445b66d24f94d249b9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151210_bb77f935392d9ecf2f65dfbb30894b95.js Apr 24 javascript-malware-collection

1fcd1623d523f6e8ecccb450dbdb3883a1a0baf328c2503e8b27d045f3c941ec O₂(AsXe)H₂(Db₂Po)

95% Obfuscated eval execution

20151217_2db22bdc06e3c00b710bc91b284b2ae5.js Apr 24 javascript-malware-collection

25e5a3849a870a7f5b7a4d36e4cff56c5fdef9ea50877549876d3e069fa51c67 O₂(As₅C)H₂(Db₂Po)Md

92% Heavily obfuscated C2 payload

20151217_2d0d098cfad04154d33487a68016e765.js Apr 24 javascript-malware-collection

49e4e137f724751e1a939426b43ea7c93deb91e7a9988fcaf5a68bb23463f9a2 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, XOR C2

20151211_2b5711133e45ed6280ff303d3d4ac3f1.js Apr 24 javascript-malware-collection

f648c0161d749c20b53d212b13482009dc41b0667a9a6b36de3c309358e7ab68 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_62182f9e442ffc1060464c7a8ad180df.js Apr 24 javascript-malware-collection

017e9c2d6491121cb428061431cfcbafdb3acdc547ccd89a16194093f7f6bae2 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_efdbb207be15063004e31aba02cd9c75.js Apr 24 javascript-malware-collection

213c3cebb56d29ca97ec67e28f0e211654413a58350166e9aa0b73a6b96822fa O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution