javascript-malware-collection · Index

20151211_3141c9a964feddcf6c7c457fbb032963.js Apr 24 javascript-malware-collection

e79eb9bde7c30340a3777c533615881722af3c37c7ed742743071c56f130afca K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_6a6a4cbd051b234bfdbaa39f6afaa972.js Apr 24 javascript-malware-collection

2f24f430a605fa0467e0b4b7796e76b360cd391bc97991221c283fdc121405dd O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151211_0c3292f00fb0702f1bc993e154cd05f0.js Apr 24 javascript-malware-collection

5db660a3b9144af07bfc64730ea3a634b2cbb776772db8b30d06905cf480d264 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Eval-driven obfuscated string decoding payload

20151211_475a3d0054e65355f7fca96d9451c518.js Apr 24 javascript-malware-collection

e6593b0d037f1e909f8b3a2166a326b287026f5c4f735488f36d96adac3e577c K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_921fdc36aad076e8415529174826642e.js Apr 24 javascript-malware-collection

ed84f633af3dfbb52477d38609d1baee359ddcf462b9eb88fbe970e693af9f42 O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval loader reconstructing hidden URL

20151210_5cbcb3bb6ae44a163da9aed1c13c438c.js Apr 24 javascript-malware-collection

122ff9f20ade55104e6d08d0e18e985f0c796cccf615ce9468e6ae4bfa649657 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_2a88fd5a88ab56135983f322f8eca31a.js Apr 24 javascript-malware-collection

afcd20c7e28b6a9c4264f5ca421ef106beed163e2818ae492df8b2771530a36b K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_bc9f03923398b6a7ab184e732e5b8e93.js Apr 24 javascript-malware-collection

e2836790c14114907d5eb61a34c419683c4db65d332a5ef325fff6ac895ab560 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151211_289ff862c13de8afd807b545d035be30.js Apr 24 javascript-malware-collection

e9a123cde9fbafa21352220912d26259f73d3f7ade270e9f6d87d4cb197ea397 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151210_72bf5c17e8309c84e73631c0cd54b325.js Apr 24 javascript-malware-collection

4ecd2f9b1b1c57e4bd2b44ceba13c74dbfcd32917fff556029fb17c8a3866ab0 O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151210_a5dc8d47be15e9ce1db270758262f1f7.js Apr 24 javascript-malware-collection

9f7ef93b3f5e9cf77ba5107d4e05034738db3f77b81b7fadda24b7f6c919fb3f O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_c03bb52a4d77bbeae05d40b66005fb72.js Apr 24 javascript-malware-collection

cae094daf01e77daa3969a99628595bf029e33afaf03dd332d620da3d4a3c1d1 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_eaeafed0069da85ac6c1fdf07bcd5bb7.js Apr 24 javascript-malware-collection

525df90134f40edf390fc62b61af408429bda63e65c422e846a78fedbf950df1 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_4f958d7f34782eae8c9a894c9061b9d8.js Apr 24 javascript-malware-collection

d278e6b698aad95ae72232219718f4ab37d651f5094561b4e3d67437e4cb85a1 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_47c066d0c18cf30f984e689df4dc9b83.js Apr 24 javascript-malware-collection

daa3aa36d325915b9bee0501c8df02e1939edf42e49c3ef412ce46e18d527997 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_ab544c568453c6a4adcf1264e4d602bd.js Apr 24 javascript-malware-collection

3f0c2c52e6bcaa48fcf673991cfb98c7d91684482707c574d27f8604f274a51f K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated payload execution

20151210_a06432e383b85f306d291a89f9bd9f74.js Apr 24 javascript-malware-collection

6e352838cd6c270c044bc7f4a8fc6dca9d466dd5538d22178e444a29b4c6581a K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20151217_ce69982b0caa85b01a660ce5957f79c5.js Apr 24 javascript-malware-collection

79660d33b149b21ad640d20d40bd90b23779616fe1be6f19c24d67d7b286a4a2 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 backdoor code

20151210_a0c64ff6cdb5e3af2a1f52cd81af351d.js Apr 24 javascript-malware-collection

711630ca31433c569d0e4b73607a6a0f7db916f1164e4408b7052a7f67f9f672 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

100% obfuscated eval execution

20151211_a35d16d38474b633d0622bb8804a3b0e.js Apr 24 javascript-malware-collection

0f7c85ef5e4a53a00c6003deae4ce25780a968b20e35a7648b1653fd416ef7a5 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151210_477c2c929f2be0c787da22dc40c10b92.js Apr 24 javascript-malware-collection

3dd2ca704bdd903a24da5022a7c2582e5acc2811383d2e23be88b348fac3812a O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated JS with eval and encoded payload

20151217_67dd74dd3f15049e10b08765e3711583.js Apr 24 javascript-malware-collection

8113f08d98f557fabc5bd05c86988374457b17128391c6e2106249cd55111dfe K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 XOR eval

20151210_08f7bde84c05638ceec5c6ce8c0cee02.js Apr 24 javascript-malware-collection

42947468d09bdf760327bd15ab55da6f989822feb7c96251464e08913eae7b5c O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

100% obfuscated eval execution

20151217_f4305c4ab8cec652c580e7e7f2f2f830.js Apr 24 javascript-malware-collection

e4401a49457c89c3fdc46995ebe09e1106c9358aee7acab3f592e60a56d57f97 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_bb0d251ee9f42204b62ffa929f4df315.js Apr 24 javascript-malware-collection

ac8dd729b7938a03c073a3a72430483d189a50dadc7463774f2b42d994f8107b O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_16c65cb3f35731fdc17b258c85de78bb.js Apr 24 javascript-malware-collection

01c096b4351665195bfa0914b366a35d7d05ffa2ce3a6a23664ab327a0ddcbc6 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_cb1a21ee3783621c9c1b513811fe8df9.js Apr 24 javascript-malware-collection

072a556b0e13d0bc626037765fc3814aede2aca6ba5a5c6c87f69e7f9b3898b9 O(As₃)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_4cb8f955300ef03750c65f9a2ed43c7d.js Apr 24 javascript-malware-collection

09f369554a54fc748b7c46fb96a6b608174d69ff4c7ae544e362a9aa3f576e84 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_72a2745824820c8cf9f22fdabdf72c56.js Apr 24 javascript-malware-collection

192d5d14d628314a92d6760ce22eac9f9b37f21e23caf60c43eae90e8a1e2db8 K(Li)O₂(As₄C)H₂(Db₂Po)

99% Heavily obfuscated C2 payload

20151211_2ad4db1e34719e014a8c8d52a603a73c.js Apr 24 javascript-malware-collection

0dae7c1703452b799d8671fe557b09a679bb88a977b6f10088eec820f40c6e79 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_44c654d0dc6c451987312282752c3e36.js Apr 24 javascript-malware-collection

a4d1ea93469c0a10066d78a2b899eb35c11029a34079d986f212aa742329739f O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_b20920c01e124a04ec0da6bf035a5e42.js Apr 24 javascript-malware-collection

abd138e0cf0e793f9cd8c9e9403c1de79b056ce4d405bc8ae291325ddffcff50 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_3611a8040551756b12d12b86db17f56c.js Apr 24 javascript-malware-collection

d20fc1dd29ebe4dee656b65b7a137ab8babd1f4c6e40cd85bc0453cc93e0d0a3 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151217_e26b4d4533e5de7f1d60f90fe0a6cb22.js Apr 24 javascript-malware-collection

0afe782d9a177b8fe83bb2424553ad04dfdb61d0499cdf1869ef6bba74b60ebf K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151211_17aec9c5d83f09b49783aa350fd22e27.js Apr 24 javascript-malware-collection

27db981c441220e743bd93a8eff956eb547fdb1bf79b0c9d6321cc263c3872f0 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_65e3ebbf66188166c28eee9d7f366c85.js Apr 24 javascript-malware-collection

90aa0d2379ed2d7b530c5722996402a3fd8675532e5fcac56400c6a3b47bef32 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_e2addddd735894db2f3e7083eabb468a.js Apr 24 javascript-malware-collection

a3a946a73875472ac753f4a176d7148d48b013f40cce5ad076e7cf867ec8ecb9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote payload

20151217_344d6c5d1b6cd8c5dbea333af3cf0b4d.js Apr 24 javascript-malware-collection

ce5b77f3f0f900558bffd8d373d76715e377a565f153d6dc6d2b67d79bbc84af K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval with XOR C2 URL reconstruction

20151210_4b149080f8bacde7bfc93b23582d7445.js Apr 24 javascript-malware-collection

dfbf1d16b21d649ecf5f5c0b47fde8bc52041e942cb1de6a26a066800b9b89eb K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_02c5baab08b90ceb64f313ab479060eb.js Apr 24 javascript-malware-collection

0855c3173c4646ddfa5b383f6fdd9fc393b9a91230a12910f2c8bb2b513fd80e K(Li)O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval, XOR C2, evasion

20151217_8136d34cfb663e03d6b7b869349675d8.js Apr 24 javascript-malware-collection

2baf58a76ea816778ad343c838c6dd8dfcc40923775ba815cff985aa0b79d0cf O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval with XOR URL reconstruction

20161006_1f46681ba73d0854bff33584e1dbaf8c.js Apr 24 javascript-malware-collection

017e103d98e55ec034fc8b5e8e5999fdca7b5d0e6a58c25150cffb5372572179 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_5d1a531180e858e7592d602697fb5317.js Apr 24 javascript-malware-collection

9e8b32ba402fd311ca43f0bfd020a288e725e036d6ac4e339160fd4aad5accd8 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_1d4e3bf57fefde89f82a5794db0bca2b.js Apr 24 javascript-malware-collection

c253413b9c6e157e582156be694f064f8bca6799544c9affc921546b1163fd83 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_15ae6868b488519d8337567e878f0669.js Apr 24 javascript-malware-collection

9a5f0c6f1cb203d3850146cf0902ee1905d96c1e3d1c7ee7ce56df854e1a7a77 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Obfuscated eval dropper Nemucod

20160921_66566a9bbc7830091a244fa6674b709b.js Apr 24 javascript-malware-collection

154f7ca38a058d2590f40ec43ada530305244e5c7e86bbedd19aa9c0e1ca02aa K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20160328_4d9dc1e8bd5d062303cd87367ccd4420.js Apr 24 javascript-malware-collection

6685a62f56178baa367e131e6547a90a8d10400df802a7ebb75a41d65be3537f K(Li)O₃(As₃SXe)H₃(Db₅FPo₂)

97% Obfuscated WScript payload execution

20160921_1c0508ced9fad1614d80fce90a3209ed.js Apr 24 javascript-malware-collection

e27406e32c891781b5403c718c4f32d67f6580cf6f952a30d0c6452ab9775a4c K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20160328_3720d47be12c9e381fbb28d2a29efac1.js Apr 24 javascript-malware-collection

f8522e93f904730e2b87dcc9246927d534d7c035a75ee8f263cdfd8019a6ba7a K(Li)O₄(AlAs₄CXe)H₅(Cm₃Db₂FOs₂Po₄)

100% Downloads and executes remote payload

20160921_4855f7b1e1da9c1c5863fa798f27645a.js Apr 24 javascript-malware-collection

3c9b29105af371fead56301baf1fdec90bfe0a8b339dbda43258a67443183fcc K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20161006_96984fda5b1816d569cd407e3dc542b4.js Apr 24 javascript-malware-collection

2cad3d12c8591f15b021c7243a5558b631ec335bc917982738a73c39bd9a7415 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed payload, evasive JScript dropper

20161006_634e3258deaab82ca4a0a1b7f2b2da1f.js Apr 24 javascript-malware-collection

15369ec2a32df1974eecf2a1de806e361f12671a2f3d5e9409163538b982646b K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Obfuscated eval dropper, Nemucod pattern

20160328_bf2981de7b04897e027194ab396885fd.js Apr 24 javascript-malware-collection

2311be576ed28e9d93e6744ce939bbff66235987dc6a60dfbd08e325c2ff728c K(Li)O₂(As₂Xe)H₄(Db₆FPo₂U)Md₂

95% Obfuscated WScript shell execution

20161006_6b3e74b20ead0bdbeb9bde95137b2e96.js Apr 24 javascript-malware-collection

7f8cad65220d2569d3ed16ba71b04cf82b764ef4292d038355bff1a680250ac9 K(Mc)O(As₅)H₂(DbPo)Md₂(Pa)

99% Nemucod eval obfuscation

20160921_c05dd34a09358454c56b9c248f1d0304.js Apr 24 javascript-malware-collection

e330ec83e6ac964ffd679e6589494a6108e1995f570c539dee7b1be30953f8a3 K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20161006_59ed7e8f6ce61247b3a2a2d2ebfa8377.js Apr 24 javascript-malware-collection

99fb20927af2965bb53b520a0fd6de99170a30e8bbf3cdf6f1af5501741f4d18 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20160921_0a459915b243d5878c25fef831b72789.js Apr 24 javascript-malware-collection

9f8d1944044e8a67a527f50e4aeb45e9358929b0d0f7aaf1730d2782f07a09de K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20161006_b74c249f5fd1d108e5ebef7aa344da8f.js Apr 24 javascript-malware-collection

7a5ef591d8fe10747776ad46fc9b8e497ceaa91b3f940e616584185a6d3b6b89 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed JScript payload

20161006_5372496255d7618c653b8f68388b72af.js Apr 24 javascript-malware-collection

36220db405a69af9837f1ece168bb00b0cb3c890eb4c73f611f59548b0490b50 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Obfuscated eval dropper, Nemucod pattern

20161006_181e7914e42029b1a2ce94f82a0ed53e.js Apr 24 javascript-malware-collection

631819a4acf2c77a196baad6db68934cd636527b7852b73e9686382c8ef6dfff K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval payload

20161006_cefe0e17d4899a46ee00c2d8d44a5e69.js Apr 24 javascript-malware-collection

7c10e263b2f5e85d9617a987f2f9c29c9ace187a5d978fd65fd9c5f93043b1ea K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_6b480348752e874134e49b4ea799cc93.js Apr 24 javascript-malware-collection

30aff382224637b4bc2d9a31aedc2640cc10a71a5ac15b2b199761d1ae57b321 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20160921_5e78b76ea160d891abcb41db9983d51f.js Apr 24 javascript-malware-collection

789149d5f226f5eb3642909acb465b5f94d946ee53a79d693b40f83359c4471f K(Li)O₂(As₂S)H₂(DbPo)

96% obfuscated eval execution

20160921_42353ce257534ed06a8c73cebdde12dc.js Apr 24 javascript-malware-collection

68261e17878fc3b618b0fec34ae97fb6fea1090c52fff206192cb972d23b2b35 K(Li)O₂(As₂S)H₂(DbPo)

96% obfuscated eval execution

20160328_cb7d528bdd1c5115e14bc3e7c3317eae.js Apr 24 javascript-malware-collection

8b06238743033b252c088ef01e38b199f06a63e8da98aa8be068dd99b5e018c5 K(Li)O₂(As₃Xe)H₃(Db₄FPo₂)

92% Obfuscated WScript shell execution

20161006_b99902271b434c4024dd672f0efae898.js Apr 24 javascript-malware-collection

bdb2e94c4c3083af0a4265421deb5ff40ec06a917b2a2683011c195695b2adab K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Obfuscated eval Nemucod dropper

20160921_b2419a000449b12cbd6aff3732baf55d.js Apr 24 javascript-malware-collection

ea7b5520c177b4adf74565706c3c8ed38eed94f30b6927b0ceb647f7f768a2b5 K(Li)O₂(As₂S)H₂(DbPo)

96% obfuscated eval execution

20161006_8b255ec7740904dc9be2dfe308e9e555.js Apr 24 javascript-malware-collection

d73dd377375d6c25909c8f4d85e84919cdcde9873d79bf5f54d6b920d8031e6e K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated token array eval'd at runtime

20160328_e97f1ee3aefa2fca911dc00e51255cea.js Apr 24 javascript-malware-collection

55f63c62250e63c85fed95d6f9ec3b6061dd3c2ae1884475f269122d38637f35 O₃(AlAs₂Xe)H₄(Cm₃DbOs₂Po₃)

100% Downloads and executes remote payload

20161006_7652f28940871b258f1e2d6373090e10.js Apr 24 javascript-malware-collection

a9a8ec66c012f1b3ae61f459d1e423507c9bba0a3c941cd33b986debd67adfa3 O(As₅)H₂(DbPo)Md₂(Pa)

94% obfuscated eval execution

20160921_91424e3b4f105c156aa0fa6f22c2306f.js Apr 24 javascript-malware-collection

b4a035e38404ad09be99953980865cdbcda5dd05b664dff96722afb53b0c9e29 O(As)H₂(DbPo)Md(Pa)

99% Obfuscated eval execution

20160328_cf4c8b0cf98a286aa26f85df20ecb075.js Apr 24 javascript-malware-collection

023fb3f0b09372d77d26b376ce59ea4d30773af77459ec2d93e81081d416a3b9 K(Li)O₂(As₂Xe)H₂(Db₅Po₂)

94% Obfuscated eval, C2, .ru domain

20160328_9ed1d9c3ceb2d6eebe3a0ca2eef57f0a.js Apr 24 javascript-malware-collection

00190029e570a3a0096f4f18b015ba7570d2e3bfe9fc13a1361402262fee86b9 K(Li)O₄(AlAs₄CXe)H₅(Cm₃Db₂FOs₂Po₄)

100% Downloads and executes remote executable

20160328_4a2f3231a14063c003aff0e9bdaed429.js Apr 24 javascript-malware-collection

faa81f106284544b8314171d334c17439b6abec5f4a5b02f301fac5e035f1205 K(Li)O₄(AlAs₄CXe)H₅(Cm₃Db₂FOs₂Po₄)

100% Downloads and executes remote payload

20160328_ac34f990f192e98a6e1f7ac4567c571f.js Apr 24 javascript-malware-collection

723bc0ac9dc9eefd111c475403ac33728b62b1d4918de95b8c02d94c6c8e662a K(Li)O₂(As₃Xe)H₃(CmDb₄Po₂)Md

92% Obfuscated WScript payload execution

20160921_d57bd7101328f2bbf1f061a7dab83490.js Apr 24 javascript-malware-collection

fa72df41c05c5483fee755296c5d2da37c5e14a015c2aac82e7d9ad428cc2376 K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20160921_5e9244484429cd897ec88fe97140c29c.js Apr 24 javascript-malware-collection

002e6ee9d0d9e7f54ead7f8981f20be210819f7a75c52e3d1e91de2fd03ada17 K(Li)O₂(As₂S)H₂(DbPo)

96% obfuscated eval execution

20160921_336aeb1d023bcb845a70471edfe8a8f9.js Apr 24 javascript-malware-collection

f77fe3497bb26b47e909d597cb0055c997e8149b22c878594ee85d0303c27381 O(As)H₂(DbPo)Md(Pa)

96% obfuscated eval execution

20161006_66dd3256194b8e0c961e21133b934c08.js Apr 24 javascript-malware-collection

bf3e9f3a4dcf3c8c74204a0c2477ba858d09ee1ab67cd7e27e0a6e413e6e1d82 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_4ee2b4106b241fbda0490b8c18a9dd64.js Apr 24 javascript-malware-collection

928f8116da81978facf9b865e639e8a66aa8c95b029989a2b56bb15ec33dd6d7 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_bfd1a049c383e11514b7119840765667.js Apr 24 javascript-malware-collection

0b5f8249142fe7294a4e3d4585b2662b431f86de9000c81b90ba885958df6b1d K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval of reconstructed string payload

20161006_b0020359a770bb11ed4f96637a3c7738.js Apr 24 javascript-malware-collection

476227d1533f42bd3cce5006523fdfc4fc60d113c34b0695fc87edf612c71e5c K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_864e615444770687ddd1ff2fdd3cdeae.js Apr 24 javascript-malware-collection

594abf2b5779688c71ae3cb6563bfa912f1f53bb3ed954ef1747e4ee915f2bf4 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_c469845d9969df315d787f00af367b74.js Apr 24 javascript-malware-collection

33fd986af9289b8049dea485a083718988c9463c700b70f62719f168a28a1436 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_3072253b3585f81ffb099b42498060b4.js Apr 24 javascript-malware-collection

ed403579d812ad28bc9feaa8bd51b00eb92297558fab3b33b2110b7dc3c3d7c3 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware obfuscation

20161006_6a0d7003e9bdeaf1f215a469db1a95e6.js Apr 24 javascript-malware-collection

776a89fef7f1c9ff1f34ef1d683c908e30f01a7e77fd1a6ce03d89b7c673dcfe O(As₅)H₂(DbPo)Md₂(Pa)

99% Obfuscated eval execution

20160328_55e89808700ab5d32d4c51d70ad620d7.js Apr 24 javascript-malware-collection

c5353b346cbf54536ce259d52da4708e480d2d52db1f86b5fd29efb65284f641 K(Li)O₄(AlAs₄CXe)H₅(Cm₃Db₂FOs₂Po₄)

100% Downloads and executes remote payload

20161006_5477ae25228fc214590181be57c7d0af.js Apr 24 javascript-malware-collection

0e724c0c93307bf6c50b31c5daa31a6290f305ce9447ef1811ae323333012c6f K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20160921_8ed14dc63f5bac37baa70510a94f2915.js Apr 24 javascript-malware-collection

e01d4cea60f1c16b2fc3a28a98b5ad4d421b0c4e8e5f757805e98a1436a9fadd K(Li)O₂(As₂S)H₂(DbPo)

97% obfuscated eval execution

20161006_b1702fb65a0a86a0f694023a787917b1.js Apr 24 javascript-malware-collection

fd6ebace08658f281f3a48b4f623598834a413333f9e974202d597d6edb43b65 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20160328_ab001adb974e9780dd3e12fef9d72930.js Apr 24 javascript-malware-collection

e8366cc918de2011f9af581da46a36f30c1ff8e51246232d7f4e76f3d4e6b1c8 K(Li)O₃(As₂SXe)H₂(Db₅Po)Md

92% Obfuscated WScript payload execution

20161006_2ea2322115354e3524a88bc4a591ab9c.js Apr 24 javascript-malware-collection

b02a0e6999a4fe125084b80271707791d5bd931f13d364c3fa460c074726b6a5 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20160328_6099a19c1fdbf315b3072719ef9053bf.js Apr 24 javascript-malware-collection

6b32a2161e9522e0fa058477272e68167085578d9bff694e438e4e4f7bb78ef9 K(Li₂)O₂(As₄Xe)H₃(Db₅FPo)

98% Obfuscated WScript payload execution

20161006_b74a9a02797d8142daae77edab05c496.js Apr 24 javascript-malware-collection

a63935c4a1664b781fe7d611036bc5e2ebc2e28bfbaa1360e2dedd40bc28f8e3 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20160921_0344ac0ed807ef595e2aeca98d44f575.js Apr 24 javascript-malware-collection

f631e328f07a7c3d34221081061f64d96da25c4f05169c427adb507bb6941f58 K(Li)O₂(As₂S)H₂(DbPo)

96% obfuscated eval execution

20160328_389c40d716bd777d94774e0ca561c5c1.js Apr 24 javascript-malware-collection

83b40b7cb3ad41c1a7999701c50aebda6da355e98bdcfb839a45c3d990d556ba K(Li)O₂(As₃Xe)H₄(Db₅FPoU)

93% Obfuscated malware execution

20161006_2626329e39c37e73090630fd4d9d725a.js Apr 24 javascript-malware-collection

334b6677031e94d4e5a3f4f0d59237b8cf50d21b8e400f2effb300ff9d0dc9a1 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval, JScript, evasion

20160328_3cb8d524b16217165f243fb942ad1cf1.js Apr 24 javascript-malware-collection

fa3890530fe3df862e82d1607c1763f79953e2fbdf6ab78b1072eefc293d8de1 K(Li)O₄(AlAs₄CXe)H₅(Cm₃Db₂FOs₂Po₄)

100% Downloads and executes remote payload

20161006_7af4b340775ac0aeec2dbeb85f045fd9.js Apr 24 javascript-malware-collection

fe3f6ea847edd97dd32b87f13011e86e334774d4f22155676cf8f6195a28bc71 K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper

20161006_c6b454eb5979e205eae20d08c9060813.js Apr 24 javascript-malware-collection

6e7156d0edea9f639e9cab9a3a3b9e6d68aa2d03c04cb71ec791b782751d43bb K₂(McLi)O₂(As₆S)H₂(DbPo)

99% Nemucod malware dropper