Index

20151217_551400094992782ccd41fb4a8eda13f7.js Apr 24 javascript-malware-collection

df66f8b6dfde6eca27e45f68728171fa293d0e6b970ad9d03ff39ff1bfec5c6a K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated C2 XOR eval

20151217_05d9126aa45e58f1c2377027d6e4549a.js Apr 24 javascript-malware-collection

35841a57bc7cf4a49ec8438babe7308b1e29736e479438a1ee9053ef2f602bb6 K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated eval C2 payload

20151216_43f90a1847bed7a9701db5d67863500e.js Apr 24 javascript-malware-collection

e064876476784b6b00a68eb709770e1e2d87ef3989e5cc4544b4e537c4f4d6c7 K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% obfuscated eval C2 reconstruction

20151216_67d02abbc328c2cb9196232b9601d5e8.js Apr 24 javascript-malware-collection

f37c02e1509469a4a4255810bb798b92a9560ab8dacba4040506ddfd29ab3a98 K(Li)O₂(As₅C)H₂(Db₂Po)Md

88% Obfuscated eval, XOR C2, junk arithmetic

20151217_2c33a5e99f06d3a3ff6ad514a87499f5.js Apr 24 javascript-malware-collection

2d38ea54110be9cffbf06f0cbae26d9aecb5f5de5148e615af4aa4fa243012ae K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% Obfuscated C2 XOR eval

20151217_5346f3d8b768130bab5d714b61ed4817.js Apr 24 javascript-malware-collection

8dce932de262f79c5e10a791d0b9c6a734ca2dc94bb4c181c8ba7ef7b21d4d86 K(Li)O₂(As₅C)H₂(Db₂Po)Md

89% Obfuscated C2 and eval execution

20151217_5dbadf3bf547268ce14aabfc9077058c.js Apr 24 javascript-malware-collection

8fca374bed8b65aba5f9e5502dec38036aeb827170a96cbb249e8c43e55384e9 K(Li)O₂(As₅C)H₂(Db₂Po)Md

88% Obfuscated eval with XOR URL reconstruction