javascript-malware-collection · Index

20151217_8e5530306a72f46bdcc83acbdbd1ae2b.js Apr 24 javascript-malware-collection

fe6ae73553460757f4a15117baff228137584fdb83fb267f6af050e2bd531d6b K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, XOR C2, anti-analysis

20151210_59818f7533cfbe254c5ed4474b3c2e13.js Apr 24 javascript-malware-collection

e2c087300e509923b70823160fa3ced52f0da225f427b40f77f9747afc1a7c81

20151210_2f630b8a09e74e464ae9941200fff391.js Apr 24 javascript-malware-collection

b289e2175af7dd10bbf4ff5d6df307b8a1e344f599171dffd63ec73c6ed4dabc

20151217_b3121000d3b10563a0c4a5598f36ce71.js Apr 24 javascript-malware-collection

12104609a91140fb40f49eef2da6629912ee3941fa84450446dd81a3250a63ea

20151217_3b053e6f2033020fb4e372d0b239081c.js Apr 24 javascript-malware-collection

163a5ecec8fde33876fb8a1737f2705b6cfe80953fe427976b147d33988b430d KO₄(As₈SXe₂Er)H₂(PoDb)Md(Pa₂)

20151210_1ad2efc0457eed3afe2873c83083b55f.js Apr 24 javascript-malware-collection

a605e04f1c6dc243f648e8d4741c708d46cfec3f57f1b751589e68c50cb446ff K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated JS downloads EXE payload from remote host

20151217_5bf0841db9c67698879b9aa516d68ee1.js Apr 24 javascript-malware-collection

90d16fdd4798000234df035d2666b1fdcbdb92bdd2f2073b7254a0d96c0baa19 K(Li)O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20170504_dcaac8421d5e1e2d47883d3cd73920b6.js Apr 24 javascript-malware-collection

0d02b284347cce4968fae3ee2410ba02eca48d1b27c9362625bd8d67b7bca1db O(As₂)Md

20170119_9951e6ca34456b6b715b9bbc9f3f1aa3.js Apr 24 javascript-malware-collection

7b03322760b3bdd3159b1efdde7b05593f73bef3e517b7117ec75f78f6355609 K₂O₆(As₇Xe₂C₂CoErS₄)H₃(DbCrPo₂)Md

20170425_94134889aa96c37b01883564e519d291.js Apr 24 javascript-malware-collection

a1f64d14e5a11000be0c41e97e31803cd4b5684693129919e4ad2c3998ae703c O(Xe)H₂(Db₂Po)

20151211_9778d8c714b281d45e91b63a6926d999.js Apr 24 javascript-malware-collection

28fa78e84489f9593634e95f3b8cc3687a97db2504ba383eb0ad255265fee706

20151202_bd01efaa49c705420b7c530b71b5fd5d.js Apr 24 javascript-malware-collection

312b3d5e220ea5d27761eca7af4d321f540c7484adff38886d03277688e8cb66 K(Mc)O₂(CAs₂)H₃(CmDb₃Po)

99% Obfuscated dropper downloading executable from IP URLs

20151211_1a02e50c9c4ef354787edc48eaccaa2d.js Apr 24 javascript-malware-collection

523c5ba0c3171437cc482257d277fc95b3c233ee2f824482f8f903decfb16775 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151027_c02588528d31f1788ffee4709f900d45.js Apr 24 javascript-malware-collection

76edc61e582c5ddc774d56789b3c620c1e29dc2809b3acce687641bc01881838 O₅(As₆Xe₂C₂ErS)H(Po)Md₂(Pa)

20151101_496eda5b1beb2d694d85cd059a13c96a.js Apr 24 javascript-malware-collection

a348a127fab815bafbc977323e4c808af25ebe1e1a116eec88a896539129f803 O₅(As₈XeCErS₂)H(Po₂)Md₂(Pa)

20151202_52a380094169443da7e9c51eede85d7c.js Apr 24 javascript-malware-collection

fa762457b9c0e0a7671af4f8a344c1d228164f0cc9041f926ebd9c90bad5f3c6 O(As₃)H₂(DbPo₂)Md₂

95% Obfuscated eval dropper with ADODB.Stream download

20151210_9dbb8e2ff49b0f9c7e4d4fc59a08a0c0.js Apr 24 javascript-malware-collection

0d5e86835ef5ffb5e735aeb48c47a2552d2959ccf46e4f6753ae80ddf1cfd883 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated downloader executes remote payload

20151217_ed4b03f76122854e8191429115052f1f.js Apr 24 javascript-malware-collection

117f51da7cabe4bec32bfb5e5fb83f6fbc4c07dbb507fae23948df61610fd0f1 O₂(As₄C)H₂(Db₂Po)

99% Obfuscated eval-driven charcode payload

20151217_7795e67e398666a750c03f4912854e75.js Apr 24 javascript-malware-collection

1de20d692709f53474ad21dd17b848d835312d599604ac2ea2ff32f568709c35 O(As₃)H₂(Db₂Po)Md(Pa)

100% Heavily obfuscated eval payload

20151217_f74387f954c8d77201a707c543436f71.js Apr 24 javascript-malware-collection

2ca0ea4ef9bd471e649805b3ef0ac85f1175c6bd3cf6140368cbf5c8a0b2c0e4

20150827_eb78214602eabe3c0c5933318a1a7bc6.js Apr 24 javascript-malware-collection

53dc6ef67aa3dbfe180d3a062ac886a476b002576f50305989ec70d0f5421598 O(As)H(Db₂)

20151210_fdcff6c4b2aa22278a07e6af4687727a.js Apr 24 javascript-malware-collection

7d9bdbcb9978c09318c2acaa4cd36c86ee55cd7fdeffdedf866a4dea8ec9247b O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_cacdbc5e4f3e1a3d2853828a98583fae.js Apr 24 javascript-malware-collection

7ef18182d2077b15259f0f1d0db5a1e867ebe609350bdd9b11a71aa1f743aff7 O₂(AsXe)H₂(Db₂Po)

95% obfuscated eval execution

20150912_650096ae3310d5b67c74b288c13308ab.js Apr 24 javascript-malware-collection

8561f79162f230d1566f40a6454fc5fe714ee31313442f1343b363a9dec29011 O(As₃)H₂(Db₃F)Md

20151217_3c1f15fc9140e0c56de905b656cdfc45.js Apr 24 javascript-malware-collection

89d4f5585a503786801e00a0f51e1459ce0f3cadb9103c84fc5798b5d7894619

20151210_d1cdb9739aff90f0b321094e98b142e4.js Apr 24 javascript-malware-collection

bc52c96ea6827badfd8b61578a6c4184251ff3ac5152e8eb0266bfb6522e27fe

20150910_356190b49fe4d3245cb92295072005fd.js Apr 24 javascript-malware-collection

d0f9d8197b3b041e581fab58ae760c2e6c39ffd29c8c90739d4d7f2b598448b4 O₂(As₃C)H₂(Db₃F)Md

78% Obfuscated C2 and file write

20151210_1978a6c2ff79e773c7f9be4526951083.js Apr 24 javascript-malware-collection

ec5755be274014b02d1f137366f9182bc82f4a3ce3c1f22b7ef83ec403f79816 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_919177e68e3c9c4d65cc630497b2d269.js Apr 24 javascript-malware-collection

f4ca654bb226879ae532e0c8a1037ce3a49c31bbae0d465b48c4ae6d746ce675 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151210_4ac6df1e0fcc3eba789192df9076c1c1.js Apr 24 javascript-malware-collection

0927a412fc486fd0d5f749834524c4517426d434ac895f73d651ef48b170c039 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_6e1a5e91dda2bf1b5801f621934e51e0.js Apr 24 javascript-malware-collection

d13962b13c0464d2b17e6d997757d31bc0a335aecce983a87a791dcd27a3f5d8 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20170206_5601e3f1b386552d309c30661ae3ae30.js Apr 24 javascript-malware-collection

9c4ccc867541ad9babae466c570b54de6abfd8c3cc8df5041ac685d9a2319391 O₂(SXe₃)H₃(CmOsPo₂)

20170110_9330ee612a9027120543d6cd601cda83.js Apr 24 javascript-malware-collection

2196fe2f79495368d26102d5d54a771316455fa4917c6edd12488059662cdb8b O₄(AlAsSXe₂)H₂(Os₂Po₃)

20151210_f45978b6f18fd341905699568f5a5ff2.js Apr 24 javascript-malware-collection

25b71bc27188ec12160ea9e857c80a1f1801df814f80541a8264d25967364a54 KO₄(As₇Xe₃SEr)H₂(Db₂Po)Md(Pa₂)

20151217_b5119bd055cd7c8caf632542dbf452d4.js Apr 24 javascript-malware-collection

0416c0e311e685f2137193561af1ffa34f8804632c55a615c6c39457ed6ce3e0 KO₄(As₈SXe₂Er)H₂(PoDb)Md(Pa₂)

20151217_c1de7f210a45a2858b3c3aa2f3916f5a.js Apr 24 javascript-malware-collection

5d39560a85a75a9d66d9de50a1c49c4036d2445f992bfb7144795543e558b17f O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval C2 backdoor

20151210_06d3b44c0d95eb73c69f1b8f4741d4e8.js Apr 24 javascript-malware-collection

00627d6ce2991d24ee5f9a32b7fccb71f04e59970e6fb6a18ac2476bd639fe68 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloader fetches EXE from raw IP

20151211_6be29a772594c7402e1b5af46136df48.js Apr 24 javascript-malware-collection

0bcfa3caab846a7688f2023a23394a01f106dcc9d1542b254917e4c4dff07339 O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

100% obfuscated eval execution

20151210_42d53a1b17607eebcb71f946b479c26a.js Apr 24 javascript-malware-collection

7d1cc3aa956e166dcd63b6b054c8d0ac44169130494e8f88edcfa07404835ce8 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_8e3022041665cf3904ce11e97a16ed7b.js Apr 24 javascript-malware-collection

0734d99b39b205243f56c432aa319552e543a56a7a4c43d750e1d57c708746c6 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval downloads executable

20151217_7be7ece837ec00d335c458c1906d8978.js Apr 24 javascript-malware-collection

23da864caa0df478fd6eaed5320ac7ec75200acb9db399eafae23b67b9faffd4 O(As₃)H₂(Db₂Po)Md(Pa)

string/reconstructobfuscation/syntax

20151217_c6ad016d95dcc698d2534eca1f0a96f0.js Apr 24 javascript-malware-collection

32aaac9826a46b1f99b62bc212165b3bdafb87b85f91048ff7e54f11645ee80a KO₄(As₈SXe₂Er)H₂(PoDb)Md(Pa₂)

20151217_05d9126aa45e58f1c2377027d6e4549a.js Apr 24 javascript-malware-collection

35841a57bc7cf4a49ec8438babe7308b1e29736e479438a1ee9053ef2f602bb6 K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated eval C2 payload

20151211_4158e553b8de94bcfb2735f4ffee7a13.js Apr 24 javascript-malware-collection

3fb0381876fcf05ce1b2d39925c690807320f79b05037e3cc4884c6e59e5728c O₂(AsXe)H(Po)

99% obfuscated eval execution

20151210_07cce78f2b925b118dd0cb92a5222dee.js Apr 24 javascript-malware-collection

5bd88af5e244f7f73f09a26c72006dd8a3c551fb2565a7e55415a51e6481c1ed O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_db1f956c3fdc4127ed83087f16e41be5.js Apr 24 javascript-malware-collection

6ef956a325410c01dd3fa1e9d39fed6749acae1eff45aec22000b24db327da36 KO₄(As₇Xe₃SEr)H₂(Db₂Po)Md(Pa₂)

20151210_295ebb9a854149b10a4d6defc9f9ae26.js Apr 24 javascript-malware-collection

96c7c28c6855f54b5a0281d1e4df4804ed3695099477c53d60cd12025c653b82 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_02bc40d3fba2284bcd5d41cc10029668.js Apr 24 javascript-malware-collection

27bff3b4831ebb298fa82377e09356a0361ea04234fc4fbb1154923673020608 O₂(As₂Xe)H₂(Db₄Po)Md₂(Pa)

95% obfuscated eval execution

20151217_468937e0eb5129ce53ef6c12dc85a6ea.js Apr 24 javascript-malware-collection

690f89490fc8e4d26f91c0ab8d7bbccae809e0f83a374a3afb07982306a34111 O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, C2 reconstruction

20170320_318f0937aae8425c94f985b30b4b1d75.js Apr 24 javascript-malware-collection

e4cee73a4b4fe891661286e8c09f586d90a108a2f5d62e8448afabd5db93c481 K₂O₆(As₉CCaErS₆Xe)H₂(Db₃Po)Md

20151210_f2b5df75ae0cdf3b3ff76e8ab2b9bf80.js Apr 24 javascript-malware-collection

1b1dd946dc62dad6cba378a209dbac7993ed9bd5d155bfe180b06c2cf04a4868 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151211_fc72c78567e802ff66d5426343c05bd3.js Apr 24 javascript-malware-collection

ad4aa68a99c7f8243bf52ded3909c2e71518e806a31c7b3239113c2895f5c15b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

eval/dynamicobfuscation/syntax

20151210_c5563a9108b9757d43f879b42208f524.js Apr 24 javascript-malware-collection

b01a93266aec69784808a86fe37c53d60f52cea2f542f68975c757c4a6d8bddf O₂(As₂Xe)H₂(Db₂Po)Md₂(Pa)

97% Obfuscated eval downloads executable

20151211_ad8774f600089b87d1c522d660887f3b.js Apr 24 javascript-malware-collection

d983c0fe651f18941fd1459839a737f52687fac7379099792bb2706646c09e7c O₂(AsXe)H(Po)

99% obfuscated eval execution

20151217_62409c104b51c7ec240249e7029b1f9b.js Apr 24 javascript-malware-collection

dde710ed0e8c2e015359738d098dc46acedf1595e4fd85a5ae3da430342ba281 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_de80cc6ca045a25ad0d6771f678e6744.js Apr 24 javascript-malware-collection

de6b48e12a15e0e8eaeb6c2bb32adfdb0bd983569daff3f9a6807504e8ce2a7d K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151211_a481916cd8070e13c60395aa39ac3d5a.js Apr 24 javascript-malware-collection

244ecba18b9f410e31691f89255fab52d5939f98d7ff689a925be662cb9a0d0b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151211_a9065f35f166295b18e110ad14f01f90.js Apr 24 javascript-malware-collection

45f80de00f30767bb5fec5edff425e49012ffd3747af6fe0f61c27f4dbdb68d9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151004_bebc213feb050389dfd366c6a33e5048.js Apr 24 javascript-malware-collection

5435a4142fb14304dbb979c97ff050562a90ba269558905320381356b3a97f09 O(As)

20151211_df7af2b9d8d39e685ee394038bba2a40.js Apr 24 javascript-malware-collection

6542f06fd38de4d08c752b05451793a1eda22288c7b779da5b241ffe722d5ea7 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_a8fc26686136be052ae73fba83838ce9.js Apr 24 javascript-malware-collection

73680f97c14c81cacef2a041ba5fa812222caf2b38cfc7bdd3b5fff943d7a57b K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20170415_4fa8eb9edfebab3914421c3623516ba6.js Apr 24 javascript-malware-collection

0100ab900130f7af747656a0d3fbe84b0c17273bef304519ae7a02974a301c8c O₂(As₂C)H₄(CmCrOsPo₇)

82% Obfuscated PowerShell download cradle

20151211_ed00edffa8c4555ce9b13fa822f9924d.js Apr 24 javascript-malware-collection

e28095df7023c3c1748ee65259d688ab131c987d1e2fcfcab8747867296f86de

20151210_d3c469f504e211a15835bd19c2ca678a.js Apr 24 javascript-malware-collection

f07d75fd2f06c1ee67159eff4cca9824165b7560cac3aa697e99d92baf809dfd

20151217_a7da67aa4556e9d5c600965679e29931.js Apr 24 javascript-malware-collection

fd2cb928782452a16c70075e2372bc88aa1a1d9aed20a922fa67b4d9da22de1c O₂(As₄C)H₂(Db₂Po)

99% Heavily obfuscated eval payload

20151210_66e5ef26444a4ab6e0e5cdcee9ed0e61.js Apr 24 javascript-malware-collection

206dca83cfba8f04d991e4f094b990a46b6e337e74317df17d4c2f5b32c1d043 KO₄(As₇Xe₃SEr)H₂(Db₂Po)Md(Pa₂)

20151217_16305ca2d281a5df7a9c1c7b0206b25e.js Apr 24 javascript-malware-collection

aa4b161373e5107302e286d83d0a41b8721301c484e342cbed6ed21be8832294 O₂(As₄C)H₂(Db₂Po)

string/reconstructobfuscation/syntax

20151211_bf04b7b8aef53cef6d62c4f72de59df9.js Apr 24 javascript-malware-collection

d9453cc4cc7a5dd40e96676dc901d8aab09f23b7d5df0d445b66d24f94d249b9 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151211_baca8f73674e9aff89ddb246e749df2c.js Apr 24 javascript-malware-collection

0d9c713789da9408b1f9bce25fd48118a3c6dfeab5d450974511330762e2c739 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

eval/dynamicobfuscation/syntax

20151210_bb77f935392d9ecf2f65dfbb30894b95.js Apr 24 javascript-malware-collection

1fcd1623d523f6e8ecccb450dbdb3883a1a0baf328c2503e8b27d045f3c941ec O₂(AsXe)H₂(Db₂Po)

95% Obfuscated eval execution

20151217_2db22bdc06e3c00b710bc91b284b2ae5.js Apr 24 javascript-malware-collection

25e5a3849a870a7f5b7a4d36e4cff56c5fdef9ea50877549876d3e069fa51c67 O₂(As₅C)H₂(Db₂Po)Md

92% Heavily obfuscated C2 payload

20151217_2d0d098cfad04154d33487a68016e765.js Apr 24 javascript-malware-collection

49e4e137f724751e1a939426b43ea7c93deb91e7a9988fcaf5a68bb23463f9a2 K(Li)O₂(As₄C)H₂(Db₂Po)

98% obfuscated eval, XOR C2

20151211_2b5711133e45ed6280ff303d3d4ac3f1.js Apr 24 javascript-malware-collection

f648c0161d749c20b53d212b13482009dc41b0667a9a6b36de3c309358e7ab68 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_62182f9e442ffc1060464c7a8ad180df.js Apr 24 javascript-malware-collection

017e9c2d6491121cb428061431cfcbafdb3acdc547ccd89a16194093f7f6bae2 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_efdbb207be15063004e31aba02cd9c75.js Apr 24 javascript-malware-collection

213c3cebb56d29ca97ec67e28f0e211654413a58350166e9aa0b73a6b96822fa O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151211_3141c9a964feddcf6c7c457fbb032963.js Apr 24 javascript-malware-collection

e79eb9bde7c30340a3777c533615881722af3c37c7ed742743071c56f130afca K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151210_6a6a4cbd051b234bfdbaa39f6afaa972.js Apr 24 javascript-malware-collection

2f24f430a605fa0467e0b4b7796e76b360cd391bc97991221c283fdc121405dd O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151211_0c3292f00fb0702f1bc993e154cd05f0.js Apr 24 javascript-malware-collection

5db660a3b9144af07bfc64730ea3a634b2cbb776772db8b30d06905cf480d264 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Eval-driven obfuscated string decoding payload

20151211_475a3d0054e65355f7fca96d9451c518.js Apr 24 javascript-malware-collection

e6593b0d037f1e909f8b3a2166a326b287026f5c4f735488f36d96adac3e577c K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% obfuscated eval execution

20151217_921fdc36aad076e8415529174826642e.js Apr 24 javascript-malware-collection

ed84f633af3dfbb52477d38609d1baee359ddcf462b9eb88fbe970e693af9f42 O₂(As₄C)H₂(Db₂Po)

98% Obfuscated eval loader reconstructing hidden URL

20151210_5cbcb3bb6ae44a163da9aed1c13c438c.js Apr 24 javascript-malware-collection

122ff9f20ade55104e6d08d0e18e985f0c796cccf615ce9468e6ae4bfa649657 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20150827_73f9ab379c1d6374553f21b50614eae8.js Apr 24 javascript-malware-collection

1cba3ec73e8cf5eb7aa85ab523b9dc74466648e0bbb15b5ab0843dc270817b6e O(As)H(Db₂)

20151004_af4b9a80c89453cde0c9634e3aeb5ba0.js Apr 24 javascript-malware-collection

3170ea65e1e8e823528f5fa4c4d0a7a91469f35aa47fc762ea6014af2698cd4f O₅(As₆Xe₂C₂ErS)H(Po)Md₂(Pa)

20151217_70174b49719c5965e1bf83b71575da19.js Apr 24 javascript-malware-collection

cab1a8036132665c98d74d39f464c7793ea87ffc79b8f489d879c580f9f7bcd9 O(As₃)H₂(Db₂Po)

100% Heavily obfuscated eval payload

20151211_9476e0fb1dd9d4f28510a6350c691d82.js Apr 24 javascript-malware-collection

cbdebc3fbc4f585aa8b0a98df61362c555a22bf6fa681cc7513ef0a5f123cb50

20151210_55edfc4d1a08135c34d24756b83dd97b.js Apr 24 javascript-malware-collection

68a93feb257ec74edc2f06ffe69068bea8b7c2775b9420b4b523af5221da11bc

20151210_de2b7382928d7f308b4c54d0fdd8bee5.js Apr 24 javascript-malware-collection

99b6aa1a13b8e9148c516a707cd1386dfbf978fb62f662137cfaa40c21355f90

20151210_2a88fd5a88ab56135983f322f8eca31a.js Apr 24 javascript-malware-collection

afcd20c7e28b6a9c4264f5ca421ef106beed163e2818ae492df8b2771530a36b K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151210_bc9f03923398b6a7ab184e732e5b8e93.js Apr 24 javascript-malware-collection

e2836790c14114907d5eb61a34c419683c4db65d332a5ef325fff6ac895ab560 K(Li)O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151211_289ff862c13de8afd807b545d035be30.js Apr 24 javascript-malware-collection

e9a123cde9fbafa21352220912d26259f73d3f7ade270e9f6d87d4cb197ea397 K(Li)O₂(As₃Xe)H₂(Db₂Po)Md

98% Obfuscated eval execution

20151210_72bf5c17e8309c84e73631c0cd54b325.js Apr 24 javascript-malware-collection

4ecd2f9b1b1c57e4bd2b44ceba13c74dbfcd32917fff556029fb17c8a3866ab0 O₂(As₃Xe)H₂(Db₄Po)Md

80% eval/dynamicencode/custom

20151210_a5dc8d47be15e9ce1db270758262f1f7.js Apr 24 javascript-malware-collection

9f7ef93b3f5e9cf77ba5107d4e05034738db3f77b81b7fadda24b7f6c919fb3f O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151210_c03bb52a4d77bbeae05d40b66005fb72.js Apr 24 javascript-malware-collection

cae094daf01e77daa3969a99628595bf029e33afaf03dd332d620da3d4a3c1d1 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151226_9474ac02eae3bbe9bcf19d94c8e68a25.js Apr 24 javascript-malware-collection

d3e22b27f536dd7129f43e0a0779c34e9356ee01e0ce26d3d8e26d3434cd7791 O₅(XeS₅AlAs₇Er)H(Db)Md₂(Pa)

20151210_aec69aec52e9ed15ebf0d4172c6df411.js Apr 24 javascript-malware-collection

e75be8ab1ea825840df9251ace0b1528f9efc8699beb4ead4f0b4858d6714212

20151210_012f572705aaeecb405c297aa3df4e5f.js Apr 24 javascript-malware-collection

5966f2a67f4f91ed360be6ab6e9d5c845f31d07b36c962692c4a31e4ede76cfe KO₃(As₅Xe₂S)H(Po)Md(Pa₂)

20151210_eaeafed0069da85ac6c1fdf07bcd5bb7.js Apr 24 javascript-malware-collection

525df90134f40edf390fc62b61af408429bda63e65c422e846a78fedbf950df1 O₂(As₃Xe)H₂(Db₄Po)Md

95% obfuscated eval execution

20151217_4f958d7f34782eae8c9a894c9061b9d8.js Apr 24 javascript-malware-collection

d278e6b698aad95ae72232219718f4ab37d651f5094561b4e3d67437e4cb85a1 O₂(As₄C)H₂(Db₂Po)

98% Heavily obfuscated eval payload

20151210_47c066d0c18cf30f984e689df4dc9b83.js Apr 24 javascript-malware-collection

daa3aa36d325915b9bee0501c8df02e1939edf42e49c3ef412ce46e18d527997 O₂(As₃Xe)H₂(Db₄Po)Md

95% Obfuscated eval execution

20151217_4f9dab2d304869d15eafb114efc8121e.js Apr 24 javascript-malware-collection

17ea897d4d6235f779e1f5d9b34cf6174e298715cb7de3282934798e2f330ed2 O(As₄)H₂(Db₂Po)Md₂(Pa)

string/reconstructobfuscation/syntax