javascript-malware-collection · Index

20151208_ee5cfa8e39cf33215329a88c85bb8919.js Apr 24 javascript-malware-collection

5a289c06168760716bd684448e5e235f9625c62538439c8bdfa6abe9ee55fe8a O₂(AsXe)H₂(DbPo)

99% Obfuscated eval and dynamic execution

20151208_a5ce958989adcbe8eea5ee57251a3016.js Apr 24 javascript-malware-collection

5a734b8bc9b2dcb87448f77212151e5f35219c6bc4adb9ccb580c43d0a4ed83b O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_1b9727bc50ae3fc4ea81c7bd442b0739.js Apr 24 javascript-malware-collection

6b78920032d1f66c7f313c71730ee31eb8da37fa8c15698a7e89b8ce605c572a K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% obfuscated eval execution

20151208_24679f8354a902d9594b6f1e0b71691a.js Apr 24 javascript-malware-collection

8598c338f22c64d9757a37f86cad29df1270c0a262292cd01a1166b16642fa3a O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_9dd4633f23abe0230bc4f87613f8ad42.js Apr 24 javascript-malware-collection

901578faab53758f7569a4cac55c181e0a2746a325884df7a4d71284f0d5e121 O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_7f0da0d03a329508e7fefdb2c9ebd376.js Apr 24 javascript-malware-collection

93c1ac12e9175fe2c8b9a43397e6d4859679f06192463ace5e08a0e71ed1ed5f O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_9edd6c7a22636002bbc1d36fd20888b3.js Apr 24 javascript-malware-collection

97923b2accac00f20493a12158d5cf7abdcf404412add92a56bbc29a4ded5aff K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% obfuscated eval execution

20151208_50d71899eff8c758bcac856fc022a060.js Apr 24 javascript-malware-collection

9a361c214a31f972857df9bec6f4aa95db64d8e20129514761a3bb9704b01e28 O₂(As₂Xe)H₂(Db₃Po)Md₂(Pa)

97% obfuscated eval execution

20151208_bd8207006208b21632d1f146a7de3c87.js Apr 24 javascript-malware-collection

a36a3f28284446ce35cb598c2ec2d08d165b74c5389191e59ecae73e524a34ca O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_a7a3f6c692658083fea9e156c4715ea7.js Apr 24 javascript-malware-collection

a370c8e040303d1dc23c37f85dd2299be7368d5e718e79da9df73b0f477431a6 O₂(As₂Xe)H₂(Db₃Po)Md₂(Pa)

97% obfuscated eval execution

20151208_86db0fe581bd2e15b1798ef4d2ce9cb2.js Apr 24 javascript-malware-collection

a854b61fb01bbc08fa54b86500341b7f9f0373bb07c88f061a288250e519575d O₂(As₂Xe)H₂(Db₃Po)Md₂(Pa)

100% obfuscated eval execution

20151208_15f15728269a688ec0feaa994204bf1f.js Apr 24 javascript-malware-collection

a9481720df67a4b6d76ed804253bd7c9afca704325176f11611a3df6f0baee2d O₂(As₃Xe)H₂(Db₃Po)Md

99% Obfuscated eval execution

20151208_de39a55f750a1a67a24832bc092183d6.js Apr 24 javascript-malware-collection

ac3aa69784cc01d796ac76a8c4d28c03de3e7cc1cab012dc3a61def0a37652d5 O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval loader, encoded strings

20151208_5950c851b080f6a56cbe349cb886cad4.js Apr 24 javascript-malware-collection

ad0f09b2f7c655225170ab2c7aec5ca17694b52795689031c866d11b56cd93d1 K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% obfuscated eval execution

20151208_aa4a383fd0455392a424766dec4a319a.js Apr 24 javascript-malware-collection

b904500f507828206b780db205520cf18e1b51eceae6e103938c780d36a10b18 O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_c080e2b3f3b50241530aa974f204c185.js Apr 24 javascript-malware-collection

bf77079fa1a700d6e4fda068426dbd0285227568f38ca41c9c99f7d196ef5e08 O₂(As₂Xe)H₂(Db₃Po)Md₂(Pa)

100% obfuscated eval execution

20151208_cd19332b58210259eae77c71ed449c82.js Apr 24 javascript-malware-collection

c9b91efafe07a96cfa8e1494fda2c37acb6d243292571a7b8083d465b8811062 O₂(As₂Xe)H₂(Db₃Po)Md₂(Pa)

97% obfuscated eval execution

20151208_0b894b7df6aa9899e6b1f655baa983fd.js Apr 24 javascript-malware-collection

cdef67c462b6aeacd6a2361ac0e7ca5c9669d16236374f832eac79c93630a8b9 O₂(As₃Xe)H₂(Db₃Po)Md

99% Obfuscated eval with char-code decoding

20151208_ffbd28c2ce959fde70a9769d16ebeef0.js Apr 24 javascript-malware-collection

d5bba30fcb2b39d72f99fec5d67ddc8be5156f9c57561c807ea9dc9acfa656e1 O₂(AsXe)H₂(DbPo)

99% obfuscated eval execution

20151208_ab7f55f62391c184bf4fe5c21ac16362.js Apr 24 javascript-malware-collection

d71535a2a418bfa476877f4bf1b815f392aaa82c65fc432bda7f42c1a8ba7518 K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% Obfuscated eval and char-code payload

20151208_a8b4950a01a724a8aa74eb3afdc36c6f.js Apr 24 javascript-malware-collection

d724dd90c2b6a2066bcab6eb1260b51512bd52aa41ca8f8e0955c53f3964b631 K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% Obfuscated eval with charcode-decoded payload

20151208_458ac53e2e5853aba7232a0f51c4d2f0.js Apr 24 javascript-malware-collection

dd6ba9de746bc5f8c6e657a42cb91737dc2e5117cd014befd29cbb200dfbf2d1 O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_2beb076c1048a52dc8cdbe35ee8c33e4.js Apr 24 javascript-malware-collection

ea469013a7c5707132044f8466a0dfa37ee526e8151e9c9f72cd06537dae600e K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% obfuscated eval execution

20151208_a2331a9c29ca6f2e48872a906f8444a4.js Apr 24 javascript-malware-collection

ecef9e3fa8bbf41f21e977d19b15ec077e5c0da03e9c325319808f49fee456ea K(Li)O₂(As₃Xe)H₂(Db₃Po)Md

98% Obfuscated eval execution

20151208_afcd6f266d034c64a5e6d5f1cd8c3a5d.js Apr 24 javascript-malware-collection

ee8aef9562aad4753747fab6332f6247adef381f6167906331b8f1ebd241740c O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_8fa791ba299c00758041dd048281b0cb.js Apr 24 javascript-malware-collection

f0c6c23b848def4e38200bd5ae7743910c8166a0d5752633400fd2d1489fe545 O₂(As₃Xe)H₂(Db₃Po)Md

99% Obfuscated eval execution

20151208_aca8880a1d0c209d0535746eed2c9af3.js Apr 24 javascript-malware-collection

f13ce8f24ca00db70835a708801385d0e06fad9afe78dfc7009eec9b1cc4b66d O₂(As₃Xe)H₂(Db₃Po)Md

99% obfuscated eval execution

20151208_64127962d211a468c8c915d511c5edea.js Apr 24 javascript-malware-collection

fe84224e52fdccc2170652e2f9a8937c5bfeb887ba577c887669233754622aa6 O₂(As₃Xe)H₂(Db₃Po)Md

99% Obfuscated eval and string decoding

20151216_32bf64597a52cf5aafa1ab535814ca5e.js Apr 24 javascript-malware-collection

00eeb0c3144af0b0a8476af3dc47560166ff0524d90fba3ec18aeb97a56a8535 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151216_01f39d41b29644223efba73ecedd0e56.js Apr 24 javascript-malware-collection

01495ee180b52b1bb00326917d3389f11bee8fe03d673a470d023ad7d0f206c6 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151215_96db8faf817eada96f4fc99c002e0eea.js Apr 24 javascript-malware-collection

02802cc2c33632159679043e4d1feb530985e1a36f450e899149d0553d38ed9e O₂(As₃S)H₂(Db₃Po)

97% packed eval obfuscation loader

20151217_ebbf395e32e52ee5359d7975a5e760eb.js Apr 24 javascript-malware-collection

0336656f65fd2676f8a359e1128677bced5f75b88f93b337ff8af4bb4356a2eb K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, C2 reconstruction

20151217_a9f4b16100ede562aa0f9eb2571c3c43.js Apr 24 javascript-malware-collection

041f919bdbd6675054a38b8de87526e6bea7c1c079804904ac2e4600d23bf3fa O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_98b6d91d4bf5df86dc665982a9bfe75f.js Apr 24 javascript-malware-collection

04bdde9c6f5ba55287dae40834a44aeb5b0c589290abf24cd0ace3531352abe3 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151216_f9bae48086ee8f4b8ff5680806b6d18d.js Apr 24 javascript-malware-collection

06dc214c719ee11f68b09114313b13c31783133e9d463c1f486ab68536864e99 O₂(As₄C)H₂(Db₂Po)

98% obfuscated C2 backdoor

20151216_14ec26d74b52f4c0ae58a5183ff88933.js Apr 24 javascript-malware-collection

079c8912d2990941735afa1dd385416846e994e04ffca977e359def74e7b0297 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 XOR eval

20151216_257af5ee30bf7425c11fcbe90707f354.js Apr 24 javascript-malware-collection

0c5137f90ec9f4ea082c109e36c06aaa91a9f02669d82d953d16ea53a012bd80 O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, C2 reconstruction

20151217_97e98f7f980317c912a5be7183ffb109.js Apr 24 javascript-malware-collection

13067283ea3a3f03ceee0aafd3ea757d8727eff5bffe71a47977d82e588951ab O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151216_98186d671214964729a07ab542d9c615.js Apr 24 javascript-malware-collection

1479ef953379264c6120f0d89c0ae7f1ce4eae50173d2a9c4a6d59e07b332a68 O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval execution

20151216_6f84cac9d9b8bef08a0483af663feef4.js Apr 24 javascript-malware-collection

14a2bb9a9311ae33f864147af7b2cb2acb6277a683b76e49782ec2d4404e68eb O(As₂)H₂(DbPo)

99% Heavily obfuscated dynamic execution

20151216_65624794d48ceb4e0081feda7dc791c4.js Apr 24 javascript-malware-collection

16825c2e62434c6bb8bf98f475692212c508fe9073f91c18316b698916a6d941 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_0bd6a85e28e34b3cadc661f1ef9be794.js Apr 24 javascript-malware-collection

1f4ad00d63fede06f9b9b4e7cd3351dc3dcc37246f6d0df66efefc364cabe3b5 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151215_7f9fb415e8c56b943d062aee3377ac76.js Apr 24 javascript-malware-collection

2212aa658645fccb6ce20d20d786909907a10cf01b3c4fe57f2103aa06994d2a O(As)H₂(DbPo)Md

90% Heavily obfuscated eval execution

20151216_5bc8d9ece002315e6f0ec743f212b9d0.js Apr 24 javascript-malware-collection

26b0870d595fb6c100c5e5af70cc4d498485678cc759290b9e24c8e869e8c826 O(As₃)H₂(Db₂Po)Md(Pa)

100% Heavily obfuscated eval payload

20151217_e3f028bf17f5856bf3eba07a5afd0a98.js Apr 24 javascript-malware-collection

270404fb32fbfda0ac6185fe6f52714a6643b6c3b0d8465bbf6b6b54c2501592 O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, C2, anti-analysis

20151215_cb09eceb874fcf00dc991f10628042de.js Apr 24 javascript-malware-collection

2b9d2d5a2c79a764f0fb71f2ddfb07ca5d65fd0caa3cb5146ea6ae601668bcc3 O(As)H₂(DbPo)Md

91% Heavily obfuscated eval execution

20151217_71e731582220966642df5457d95079a8.js Apr 24 javascript-malware-collection

310411ab0feb05fd0f7321f47136c5233a0187e61e30ca072008f30b3f89dc4a O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151216_fd2c2e476d89554ff1c37d85fbc6b298.js Apr 24 javascript-malware-collection

3e8427e92986903bc4670d68cda868b1a1a829982bb343df1b2cff96bd2069ff K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 payload

20151217_efa9b3982cffc3fccfe588bad5398082.js Apr 24 javascript-malware-collection

3fa9c25d27c303c26cfe0e01bad6a08e5fda846be35951e3d0765cac570428f0 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151216_e07fd4d872ede39c6a9be918501b97c8.js Apr 24 javascript-malware-collection

3fd949d54e3588974f59442d579cbef3ba07a1537f97a1e95e44f428ebf92299 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151215_ff2c4e4d0d0d3e0e1fc0a3571b109a0e.js Apr 24 javascript-malware-collection

40461865e1e9b8b5193f49f485bfc20e0de70eb99a4579e9aba33354d94450d8 O(As₂)H₂(Db₃Po)Md(Pa)

99% Obfuscated eval, trojanized context

20151217_55731fa84ac32405d520e48fbe982b5b.js Apr 24 javascript-malware-collection

45546b9598d8dcbd8a7999bb620073a9bc17830081763b9b907a0e4e0bc8f9c6 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_3a88c03aaa0714a9cb0a8dda34f84141.js Apr 24 javascript-malware-collection

5236d644e74059a2dd34ba6de1d11930c75680ba5d38481ea45ddb207a1f6e48 O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 backdoor code

20151217_9b7ca5b1f0b3c94caada453f28daaa68.js Apr 24 javascript-malware-collection

54a697a7cc22e7e71427cfd707d02a5ae2529f0fc1f015e40df3b305387d1209 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151216_0e99f20a54d3d2a1afce1a667f9f0987.js Apr 24 javascript-malware-collection

5548f78ac146848cafa63dc902259b71018b960a3d12c06fbe79fb543387b853 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151216_1298b34a7b075f4dbe75c8e634ebad6d.js Apr 24 javascript-malware-collection

5564e42ef26f783127e287fa1beca257800eb91c2e1b5efa7e9b9347152208b7 O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151216_d71c2b5bcbcedeb52fa7b7093b5ccb4b.js Apr 24 javascript-malware-collection

579e1d868c71022dfe7953f2a7aa9790ef9f617904b1d25c0581242214bf8f97 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_6e537de815a21b31421c3e9793b3be95.js Apr 24 javascript-malware-collection

58672a520e1a649efb14a28b92586f0ad3e66978c08beaf4740542775c3afcf8 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 payload

20151216_97bbc63375dac415189f815469a38505.js Apr 24 javascript-malware-collection

5af3c74513400d20e8b5ea9cf93f2c8fc2a91772db32522b9935314a6745b19f O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151215_763bbee5393a1572e813eda179edb19d.js Apr 24 javascript-malware-collection

5c580aedb1d4f20d84f0d8530e9b396ae7082d92c9bb1139a495a6b8058e23df K(Li)O₂(As₃S)H₂(Db₃Po)

95% obfuscated eval loader

20151216_7be4ad748afff40eded3f450dc11c8d2.js Apr 24 javascript-malware-collection

5d9d608e43375c4fb198420eb22fb0d6815b30f874168c2d51bf441ea68b5972 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151216_bb8e5177ebadbeeb2a5356144cb67720.js Apr 24 javascript-malware-collection

63810a7bbee5c1272abdaa91bcadb78fdf244688f6311390faa63c4cd374388e O₂(As₄C)H₂(Db₂Po)

98% Obfuscated C2 backdoor code

20151215_3e35f3e90621204643f4af6403af828d.js Apr 24 javascript-malware-collection

63bbd47930965a7e7934509f7f9195e4937c55eb64e7dc628c847a6d279b0132 O₂(As₃S)H₂(Db₃Po)

97% obfuscated eval, trojanized context

20151217_a3c07af71b9864210a9b7c49a476074b.js Apr 24 javascript-malware-collection

65509e2e4ffa2b55cff537dfd6fde0214f27bcd9d61732da3790180007b2a43f O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_a59f31fe26b15ae291ea40575c68c6ac.js Apr 24 javascript-malware-collection

693404522ba22b3cb8e6b2beb27634e576ef76f998ec041be1b061509d887d00 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_cc6ced55cadb3d8dfa3d6fa99da870df.js Apr 24 javascript-malware-collection

6f1c40c27af7edff9d11539097002c6f4fca0c814a0a6d1ec8d6a151aeea43c8 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 payload

20151215_b6b959af196d3fc653fb3bb13e431cdd.js Apr 24 javascript-malware-collection

6ff90a54fe6cac1c6e4d2937514a8584ece1639c4543f116a629268f23efd1c2 K(Li)O₂(As₃S)H₂(Db₃Po)

95% Obfuscated eval loader with charcode payload

20151216_9951a5c6c1f9e73f6453b5a6f23d8118.js Apr 24 javascript-malware-collection

71c919d30df7a82b6f0f27af7665dc7f985a9c00342673fef7a6232232817eff O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151216_e22a0993cd54faba4f5747caa9788daf.js Apr 24 javascript-malware-collection

7239280c2e524beb86d36d57b5d6b97af7f13a588bcf221e245d6d0908ac0fbb O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, XOR C2, evasion

20151217_f06eb1d45a1423b85d9147fa7e676436.js Apr 24 javascript-malware-collection

77f31028cf76a74c453a6bdf43a562fcb47d904959685264c8676d4bb9a279d5 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151216_2083e4b703132fe425fb14033c76adcf.js Apr 24 javascript-malware-collection

79e27b938d91c1354102d7d26550cfa5f38967b2d4446e4db1480d3f26c1e2c2 O(As₄)H₂(Db₂Po)Md₂(Pa)

98% Heavily obfuscated eval payload

20151217_3ddf7723764a2306d66300ca335a5cc1.js Apr 24 javascript-malware-collection

7e3a5d3a67bfe14077a251bce1434c877875463f10ecc18175f82cc22f2007e9 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval, C2 reconstruction

20151217_8ea401817c883f6d6e1e6464a8a647b8.js Apr 24 javascript-malware-collection

7f6bc2fc41c0e4f0cb0e2bc15f84ea8f8fce7005c3b15ebf4b1559b6ec2ecabb O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_53622f9f3ef3e1587184d3e34c2c5c8d.js Apr 24 javascript-malware-collection

871382cef470e5dbeef659c989c863a58794ad604a15792f99b39c71b65a3614 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20151216_1b4982d93376e3819b5124d4ee3b867a.js Apr 24 javascript-malware-collection

875481b73c01502654b84415e09c88e4ca3b5893e256c33d14972041d55453a8 O(As₃)H₂(Db₂Po)Md(Pa)

98% Heavily obfuscated eval payload

20151217_871bccf87984721eba72c68213104737.js Apr 24 javascript-malware-collection

8a426b46c0be88591acb26b7283ccf52f28c7e6ffe7f47d39ac7ef7df676a05b K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151216_0758a093fb879b495148828f5302e03d.js Apr 24 javascript-malware-collection

92cf698dd086b2276dc8a48f7509415403c464330b339130e48571fb897447c5 O(As₃)H₂(Db₂Po)

98% Heavily obfuscated eval execution

20151217_db56b2bd8f3aef96384daee1b1be0b2c.js Apr 24 javascript-malware-collection

973a72517e9cfb07a5ab3086f83a76334be80a33e29f18e28e14a77862224b49 O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval loading remote payload

20151216_dd94f41f647059fd3b69e0d70feaabca.js Apr 24 javascript-malware-collection

99329df9a3b97bc36b247367ce732c2300b3981e841f5a86c5ef6eb35f020c07 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151215_10bccb7397f8e251d72a67ab588ea617.js Apr 24 javascript-malware-collection

9989618a65023556b579745d7441c5ac4fa451edad532f2e917c1d9a96d4a7e4 K(Li)O₂(As₃S)H₂(Db₃Po)

95% Packed, obfuscated, eval-based loader

20150924_d096df3142ff2b506c962cc434883682.js Apr 24 javascript-malware-collection

9abb84f4a995c7572257d898ee2158d0df806a58b4f1586da87a8c1b8e7ad2b2 O(As₂)H₂(FDb)Md₂(Pa)

71% Obfuscated ADODB payload execution

20151217_b124f15c7fc2ac34775dd710b82bca40.js Apr 24 javascript-malware-collection

ad46c825b930af0d5192dadb7332368a312fb82fb36a566c40d656ef23111303 O₂(As₅C)H₂(Db₂Po)Md

91% Heavily obfuscated eval payload

20151217_c0d9e43ff730ae72d21f2fa67b6095e1.js Apr 24 javascript-malware-collection

b1f3a61087832d5e85b7db91e169b7ebc31c26c42ea128596dadba42bb75fa61 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 URL reconstruction

20151216_1cca17a8ee7647a41ca3471355a81bd0.js Apr 24 javascript-malware-collection

b33402d14f0b62ec9190454acb2725a32e1f94b11339b646853df5decb52d80f O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_69617d3366de4e26805dbaeb1b1a644c.js Apr 24 javascript-malware-collection

b571519b3c3e461c8e85cf1d65c9031cd35e03a5860d0d0a02cba90c68247205 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151217_32c476b1459e72d0dc591510e4ccceb8.js Apr 24 javascript-malware-collection

b758fc5c577145172b1b65e6b507a17244b91ef3414c656f7b65fc6935ebc385 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151216_1ed38a2d12449baf8c5eee5579e05812.js Apr 24 javascript-malware-collection

b881b707ed7199a0a0f5ca3f1c47b408e2df38afb6bb9e93ba1b1caeaef7c5aa K(Li)O₂(As₄C)H₂(Db₂Po)

98% Obfuscated JS with eval and XOR C2 URL

20151215_944ad46efac42341d0bc7e256bbb9fb3.js Apr 24 javascript-malware-collection

bdb11f7929fc23e0f3b71b0c581bb819d627dfc907f7b23863759aba45ef9cdb K(Li)O₂(As₃S)H₂(Db₃Po)

94% Heavily obfuscated, eval-based JS

20151217_1b2257606e52ee76b75444a4650246f8.js Apr 24 javascript-malware-collection

be0eff8dad68fc6a8db89f1564bc6062b9c67a87965b6aa66a95b18342a25bfc O(As₂)H₂(DbPo)

98% Heavily obfuscated malicious JavaScript

20151216_158320317abe5818def8a1bc9a8602d8.js Apr 24 javascript-malware-collection

bef869dee77f6344a423d95c3eb5d3f4b34b728d49a47dcaffe17f30f403e1c9 O(As₂)H₂(DbPo)

98% Heavily obfuscated malicious JavaScript

20151215_74ee4f20d3881ddcdcc2c947cce4ddcf.js Apr 24 javascript-malware-collection

befc4cbdd6fc67622c1e37be9225118f3666cb1ee0fa0145dcb507bc94062d35 K(Li)O₂(As₃S)H₂(Db₃Po)

97% Heavily obfuscated eval payload

20151215_454027e7334cc1fff6195097d2c75842.js Apr 24 javascript-malware-collection

c236d5ecaa39843524a22354022466c8f1006f3e372f3eab2aa1b8c11fb6199e O(As₂)H₂(Db₃Po)Md(Pa)

95% obfuscated eval execution

20150824_1432b12a0fca307ccf4664c4027b2e82.js Apr 24 javascript-malware-collection

c35617ed431e2b68ed5f779638030d5399cb5de4eb1246b773f177d3b8aa6c37 O₂(XeAs)H(Db)Md₂(Pa)

80% obfuscated JScript builder pattern

20151217_85580b9ce0f66fd33506df66d42e3a43.js Apr 24 javascript-malware-collection

c46ae7e0ef3d11663504cb37e37a90b776539628ae18a1694c418f26c4696818 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_73bf48de4d9e3f6087367f59cdb1b353.js Apr 24 javascript-malware-collection

c52bc4442959df717565e47ad6ae61d97545e326e5ea8c7d303b01102100813a O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval loader with XOR-decoded strings

20151216_90ddc92b8a0ecd713b014e181fe74dab.js Apr 24 javascript-malware-collection

c60d6b58f6544c8de0e68774510aa9e48db197c74f5e6a0eca8b8e80be15b878 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151217_0b5d8255066e9f6b02de977068500aa7.js Apr 24 javascript-malware-collection

c69e09702f7ae71de7cc32e2c6905f0233ebe75ed044821ef57ba5778a89cac1 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151216_74fd2c46503dcba57b38449d001820ef.js Apr 24 javascript-malware-collection

c84877494e4a94fec7441f209729994ffea463f9dd7a180ea46960071b12e5de O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval-based malware

20151215_2791a00b924a29b7c841277b987dea8e.js Apr 24 javascript-malware-collection

c8d9af30aed72ff6c0760c5253b90478b8f38544afa90bec3219c27eaca3a858 K(Li)O₂(As₃S)H₂(Db₃Po)

94% obfuscated eval loader

20151216_6a0699dfe71ed02aed0d1f15fc6872e3.js Apr 24 javascript-malware-collection

caa3e7f75cdce0f3ab6cc2ce7a89d6ef37a9dfd251d0630e489aabc5dba5de5c K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor