Index

20161006_1f46681ba73d0854bff33584e1dbaf8c.js Apr 24 javascript-malware-collection

017e103d98e55ec034fc8b5e8e5999fdca7b5d0e6a58c25150cffb5372572179 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_96984fda5b1816d569cd407e3dc542b4.js Apr 24 javascript-malware-collection

2cad3d12c8591f15b021c7243a5558b631ec335bc917982738a73c39bd9a7415 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed payload, evasive JScript dropper

20161006_edfafaf96663545ab2335343317cc1d5.js Apr 24 javascript-malware-collection

7a4f58c2cea85909fa1fc7f8764b46bbd5c7556e7bd48d0391f694592a881d2d K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_b74c249f5fd1d108e5ebef7aa344da8f.js Apr 24 javascript-malware-collection

7a5ef591d8fe10747776ad46fc9b8e497ceaa91b3f940e616584185a6d3b6b89 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed JScript payload

20161006_181e7914e42029b1a2ce94f82a0ed53e.js Apr 24 javascript-malware-collection

631819a4acf2c77a196baad6db68934cd636527b7852b73e9686382c8ef6dfff K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval payload

20161006_cefe0e17d4899a46ee00c2d8d44a5e69.js Apr 24 javascript-malware-collection

7c10e263b2f5e85d9617a987f2f9c29c9ace187a5d978fd65fd9c5f93043b1ea K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_6b480348752e874134e49b4ea799cc93.js Apr 24 javascript-malware-collection

30aff382224637b4bc2d9a31aedc2640cc10a71a5ac15b2b199761d1ae57b321 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_8b255ec7740904dc9be2dfe308e9e555.js Apr 24 javascript-malware-collection

d73dd377375d6c25909c8f4d85e84919cdcde9873d79bf5f54d6b920d8031e6e K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated token array eval'd at runtime

20161006_436d6ba2d3a07d16073ec1b352c3bbba.js Apr 24 javascript-malware-collection

aae5b423df0658f7f04615bd3350448a491ce8467e79187d8b892d4895ea6d47 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_bfd1a049c383e11514b7119840765667.js Apr 24 javascript-malware-collection

0b5f8249142fe7294a4e3d4585b2662b431f86de9000c81b90ba885958df6b1d K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval of reconstructed string payload

20161006_b0020359a770bb11ed4f96637a3c7738.js Apr 24 javascript-malware-collection

476227d1533f42bd3cce5006523fdfc4fc60d113c34b0695fc87edf612c71e5c K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_c469845d9969df315d787f00af367b74.js Apr 24 javascript-malware-collection

33fd986af9289b8049dea485a083718988c9463c700b70f62719f168a28a1436 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_5477ae25228fc214590181be57c7d0af.js Apr 24 javascript-malware-collection

0e724c0c93307bf6c50b31c5daa31a6290f305ce9447ef1811ae323333012c6f K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_b1702fb65a0a86a0f694023a787917b1.js Apr 24 javascript-malware-collection

fd6ebace08658f281f3a48b4f623598834a413333f9e974202d597d6edb43b65 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_2ea2322115354e3524a88bc4a591ab9c.js Apr 24 javascript-malware-collection

b02a0e6999a4fe125084b80271707791d5bd931f13d364c3fa460c074726b6a5 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_b74a9a02797d8142daae77edab05c496.js Apr 24 javascript-malware-collection

a63935c4a1664b781fe7d611036bc5e2ebc2e28bfbaa1360e2dedd40bc28f8e3 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_057ac4fa734a83612d16ed28697eb0fa.js Apr 24 javascript-malware-collection

33e7cc19719490e571b03e2e3d66121194a55598d25e5be6631d371496c9f872 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_2626329e39c37e73090630fd4d9d725a.js Apr 24 javascript-malware-collection

334b6677031e94d4e5a3f4f0d59237b8cf50d21b8e400f2effb300ff9d0dc9a1 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval, JScript, evasion

20161006_4684172862e7be872dac2d74dac13eb0.js Apr 24 javascript-malware-collection

53907e0d54f734dd170f00b32a817414dc941dce8a25eb673b425587d739db91 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_5c1e059ee24577b3b62e4d2e0a9c7f1c.js Apr 24 javascript-malware-collection

12099517e83c007377071f955d38bd6b19b1543adbc914a441ab0a8b8a08a4f0 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_d00c42e5e22bbb3a70d83c3fab73a55f.js Apr 24 javascript-malware-collection

d9fc6885986d15b8820000948b9fb7084a4dea242fba7f8685eaf821900cc640 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload

20161006_c646d1519d46f9371de554d1fa9f2721.js Apr 24 javascript-malware-collection

7d8e9e6517ecc53c30fcbeb3faec1384b027d6a040af9a5ccb4072b8c8e4ed4a K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload

20161006_0d708d4c3c711967b362b8a84ad02e64.js Apr 24 javascript-malware-collection

f9486391191f82e1869035ad94567d60ddaf341ca21356117f449b79147fa1c5 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval execution

20161006_a138e83d132736e0e74c42c3ae909431.js Apr 24 javascript-malware-collection

5bc8cf92780dc662f8040520768aa94912e9d82fe436bb9cbccd0221babc9744 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_79ad04e0a788051121dfe844a00bb245.js Apr 24 javascript-malware-collection

21c69e7da54117999520a87a95cda6688abd4e324f0f67a03bc4f7d5f843a18a K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_ebc3d885d6ad60781623518e7aa2bfe2.js Apr 24 javascript-malware-collection

3eb59c3b92a4b0a06aa6a02c94ab3a38e64ada3304a420c28662a585f824020f K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_d07ee071233fe51e7ceadf5822c0adf6.js Apr 24 javascript-malware-collection

0c1f640bec17c6af9156be09cf9e4ec876b77237bd002d14d8bcacd723bcb2f9 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed payload, JScript activation

20161006_91db940d7e51b94cb8de3ba91d29b309.js Apr 24 javascript-malware-collection

bb88636ac3abc771ebe2dc70a620250f9034484161e15b76b88c3e600dd51b20 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_9569f4cbb779829044b97293d010408d.js Apr 24 javascript-malware-collection

98eba93aeb65bf83ca877fa0ca61a97621423187106cedef0a4fd3a44bbec35e K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_62f335e1a008ad9e359b86343d720f4a.js Apr 24 javascript-malware-collection

065f6c10d9e7bdc152209073fa80df05a3925ba4274abd726f364b32c1ea9650 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated JScript with @cc_on, dense token array, and eval of reconstructed source — classic evasive dropper pattern.

20161006_6410e57d2798f422b59afe1cf5a2cca5.js Apr 24 javascript-malware-collection

4352eb79d3de2d0bc12905b9417316b536fd25092f6865ba65558031675333de K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_836f015554c4d2b4e09f1187595316da.js Apr 24 javascript-malware-collection

1716e9a346ab1b6eb5e3c2b17d0bd094486a982ef56ded8533ecdb0eb79b1cfd K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_2fa8d34132661bf3bf016808ca593c64.js Apr 24 javascript-malware-collection

afca2ec8b616020a746f0b2ea8fdadf2c6220c840118f7378e9d18aaf2c3fa1f K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_6cfbca770f1526d7739b314b945cbe54.js Apr 24 javascript-malware-collection

afbff07d1e0dd458737954c4297ea110563040389fd6689cee55215858c1239e K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_d4d9d1baca0b767d796d495a5371a531.js Apr 24 javascript-malware-collection

fa97ec0a3d784003a86a20a168905e276ab66f88d41f4ef5a0a48a84ade93ac8 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_294238893bfc0cb7e693b32d7790ba15.js Apr 24 javascript-malware-collection

f3a14e2ba0f38a790290a05cbcf02d24a227fc345526e5c89d1b09e71bf14523 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_469a9f18edc35edca2cdbfccd06adc91.js Apr 24 javascript-malware-collection

b6fbd71aa2871a9918e7467d117c255bf1685dc2035c68f69f7ec9999aa7c6b4 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval execution

20161006_a830ae14a626696b7ab05e36506fe0d4.js Apr 24 javascript-malware-collection

d524116f5fd43e4eb0005e473dc387b5a4d731f9467d6abc22cf1ea40ab158ce K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed JScript payload

20161006_64d568868d0bbd423955b774bd7b22b9.js Apr 24 javascript-malware-collection

9ffc57945a2fd481116d8617ae90c0c1b9032028959a95639e478793482173c1 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed payload execution

20161006_5785f5917e65a6d7d41389440f138a48.js Apr 24 javascript-malware-collection

576289b05202fc63a6ea080dd10ccb1485fd3527c729573964e73026f0d6d62d K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval execution

20161006_72049e09c886f59813ae039921f55bd7.js Apr 24 javascript-malware-collection

8ed6e9246bf1292ceab5d819f42adec0c9dd7ea9a00b3a394fd4bb71abaf5412 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_a0cd051d24f0401b7644dc1b78b8eef9.js Apr 24 javascript-malware-collection

c3040b3494f1ed3ef627e1a07c5df74e52bad929a6747f5b7690c4156af7e389 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_abbf615f9c016ed89658c588367e9fe0.js Apr 24 javascript-malware-collection

606054cd2852c2c592f8afd568716f7652098c3a89966516050ec8c973ea238f K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_998cd599a25ef669658713e7ef0135f4.js Apr 24 javascript-malware-collection

2c063ca85a31502023f55ff1f815609ff6b824df556dee79e585a1274b7899cf K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_44993935b21deb6c951b817dc39444fe.js Apr 24 javascript-malware-collection

f5b84d2c12cb9fc2aef185218176d0a6385e176889c1ac7e18ee432bcc3aea1e K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_19ee836c35feb02e8ff8c7772d3deb71.js Apr 24 javascript-malware-collection

4e8a533287bab7019a16a24efbc16959d5e7a0cd9c6668f33690486724787cca K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_f9187e9528062f26e3f9551f71cd2619.js Apr 24 javascript-malware-collection

a7510041c275e431c2553b88b418a849678ce80ff995bdf33f31576c8b80b179 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-assembled payload, JScript activation

20161006_45337d3ff97006c9e19e47bda0a78de6.js Apr 24 javascript-malware-collection

4c6ec8173b8570469aa836fbbc52f95df894b71653b5e59eabc5adfc1427ea68 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_0c99cd8ea8e6949274bdb8393a11c850.js Apr 24 javascript-malware-collection

2c536b8a301400c66a348e6bacc2c7611c87d2a15201ff72352a88ad21c2d8bb K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_4f671ed1f35b386714ce3287e64c79f0.js Apr 24 javascript-malware-collection

002bb608a7c81d7e91ea2b1f8230aae87326c4634ac0bb4ca2f991ed34bf3e3d K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload

20161006_f39dcf13842b848d759d74493a9cc9df.js Apr 24 javascript-malware-collection

17c49e89104643fef55c2c93814fc93c7aa258fd6e0cbec64f225028d0bfcd5a K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_19516579a79ceb26b721098f901d8b04.js Apr 24 javascript-malware-collection

5132f7cc8e30b1fce90263858f3177c2186895dd2e13d6e8039973bc5a3cb5e8 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_7e10e6d90e773819c96f87d1517f494b.js Apr 24 javascript-malware-collection

0da4e0ae95952c3b2124781269c9238cd671b064365bd8da649124cd6d4dbd79 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_8d855b92b72e26800510eba5ba902020.js Apr 24 javascript-malware-collection

e4dec4c2e08a900f8e19eec299aa6c23ffcf164fb19b6c06ac1511ed3a47773c K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_2192ab539b02d7d3bfe728c8d6ad5cb7.js Apr 24 javascript-malware-collection

9beb0ffbc476d327edbb57448d413eba9101d494272e3c70f75b0f638f2acfc2 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_ef2419007ab84fc02d4ca04e8a1e5538.js Apr 24 javascript-malware-collection

efcb053fd54ad611d8a46a7c114f705ce90c2c8eb9273261a8edf52a0277751a K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval of reconstructed payload

20161006_d9303762d0cbd53b8428c897c6597348.js Apr 24 javascript-malware-collection

268020120876ba350d2d6fd4f724fd8ef979eab93ce6263fdbf1241eae14bbb4 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_86dd4e496f7b8963538d0acf05ef1da4.js Apr 24 javascript-malware-collection

fe0f2c0b4d865d3ab1041a9cec5acc6721d8b36daab0eb54a25603c8f6215b47 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval, JScript evasion

20161006_e163f0bafca31792100fdb3a1b480142.js Apr 24 javascript-malware-collection

73cb474d056eb83bc41a1eb7e88be21f8314a47a650cda74ce6f15a8be5c5a51 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_ae3e08a2ec1a341294dc5cc8811d0adb.js Apr 24 javascript-malware-collection

72bbb164080e86eb7a62d61a6e607e60a5398b1fcad081fb28b8ab7f1227e48b K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_cf38f0966e8ad7e9a5257fe3d0d90f5c.js Apr 24 javascript-malware-collection

b0d8f171f026a28d25bed147b56f3ffdfefae3e4c0e3ff2b6963f4567b1ea010 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_dad016b6f1d9981d0350b5f06959d32d.js Apr 24 javascript-malware-collection

d64861978a85117e72efc582534e88bcdf964e332fad23bd7508490c2fc52edb K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_8b159c56d22ae076360a3a1af99e9694.js Apr 24 javascript-malware-collection

1348b1f358d8d9e58f086db83a71ffdb44a16ed0bb86fff2bc046c86f90722b4 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_089e3d83548fe790d050782c507cba7a.js Apr 24 javascript-malware-collection

503fc8aaad6c04071bd9200fa92b213769be2df3411e1e9948b84e2d164de466 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_707c84cd56909b4527cde69c6589d5e3.js Apr 24 javascript-malware-collection

d81e883955e5e05c72857f152c186ea7897e8ce4ee1382ea4500ded9bcdeaaef K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval of reconstructed payload

20161006_d5f386987f66c66a82504ce82da5c398.js Apr 24 javascript-malware-collection

ad44cfca5e265920c61e0bc045191deff20d86aef015d1d6f0d883db4a887429 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_88a719e07af19fa567541c161d270f36.js Apr 24 javascript-malware-collection

5f34d2fa9cf4b0f88767883854a7b20342da4ed814d5fa71737d3371125630a3 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_ae241dd7f3e4946e4b322df03caf785d.js Apr 24 javascript-malware-collection

309ccb769046735290d7dc14144ce1a6e7bfcff092767da9cd708a86702a00bb K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_15772296cd30411268f601059c647959.js Apr 24 javascript-malware-collection

6bb4a3aceda44aac0e047b4adc9fc795afe3f0ef10e232a49114b9c4a4355842 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_39a28aab425c7b4cac435ca5c5f4b32f.js Apr 24 javascript-malware-collection

d124c3cec468339a6c532bc074d1100c703e8244b583efbb03224bdfe1383d92 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_e035c41df4c807401dc87b7e52fccb5e.js Apr 24 javascript-malware-collection

08fc8d3b2eac3a472594f7ba314541264bab54341ea1842ddb652f17f381afad K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_9a8d250e22c4e0c30cde745d7e7928b6.js Apr 24 javascript-malware-collection

786f19705cac1ff3d0e185fcdcb86ca0ee6aecc2bcdeb07cee9511ed1c06b284 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_1894aa7528e68ba3b859f0bd8a6ecde0.js Apr 24 javascript-malware-collection

6678b24d2e19c0e08d3bb9ff06ed0366b492b1c436602ea2d23066f5c5a9a708 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_d47b83536ae5201668f1d977fc0ae416.js Apr 24 javascript-malware-collection

27d8451c4641ca72b3335a58f06f039320ab996bc2bc3fdc2e9aba8a0b4740f1 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_c0a7e318b7a1a7a98ebac71d29d0f192.js Apr 24 javascript-malware-collection

66b3624bdabffde6ca7133ef336afd5b155eae203af38c92eddff25934a01cb0 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval of reconstructed source

20161006_ba92f7e1c528174ddc39c084f84f169a.js Apr 24 javascript-malware-collection

a57b8c51417e46a261b7f6888ca5d9ca9d6035a6022a72234b973d82c8f4c9f9 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval of obfuscated string

20161006_8451b3dc9b73f8d463805a3284909455.js Apr 24 javascript-malware-collection

e443666f7ea4386e2ce1169f30714ec2b5f03c5967808c7c3a89f396819bf102 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated JScript eval dropper

20161006_be09607aaaac9e61df94e17127b8f447.js Apr 24 javascript-malware-collection

7b2e84a5b898b48483e8a250ca4b8edd9e0413253c3951e78a989f191794bb41 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-reconstructed JScript payload

20161006_d83dd764c3043c2db5938744280ea0bd.js Apr 24 javascript-malware-collection

19b0c2d367aa27fd6b5f1f76db337f56a732e8da7a9b19c43c9954823d15bd3e K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_f87c2c7e14491d48fe69ec62a479b950.js Apr 24 javascript-malware-collection

cb5500ece6850742f87454daf8b9c154a656db2c82b945586aead49b9ddb9959 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation and eval

20161006_894b6152112181b2eb52d252857848b1.js Apr 24 javascript-malware-collection

f20b78c7a40e9a6d95f4c3a4f88e436ae05584e882493612a1d266e1ec36a696 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_5200cc1c07018e8ef7007378a214571a.js Apr 24 javascript-malware-collection

534d2ec34196cae1e365f6426bb8f461e4a3a83baa83a346762508eac8a4217c K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval-based JScript dropper

20161006_b9af0d031d5361c0c305c069ef98486b.js Apr 24 javascript-malware-collection

a0362a315bc0a367d068fcbcff16e7271e513d61271b11006984582aab826336 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_c3bd2c9c53dff5650ddc53061babc8f0.js Apr 24 javascript-malware-collection

e7c44e6d135a43d86db0ab123360cf1c04553ab7442b09ba5b651398a7e0bd76 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Obfuscated eval payload

20161006_b38275df39b2035dfe24b306ae369d53.js Apr 24 javascript-malware-collection

7a42f8034f0847a757a80ccf2377f4c66e0c48460e67e5bd886e4636c165b823 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_18f06cbda8fae00e68e9d2a5a9796486.js Apr 24 javascript-malware-collection

6d9ea11508ad5d5865ad40bc32a9712917db68b3d00f95f4be6d1fe5e9080c5b K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_83772d4e834ba66ec640610855e1ab8b.js Apr 24 javascript-malware-collection

30c9b600933f838924e694614acb21bedb9e66e18ae6f4ad148113b4d2b6f636 K(Li)O₂(As₆S)H₂(DbPo)Md

94% Heavy obfuscation, eval, string assembly

20161006_8a0b692d1599319a26562adcff00b0d9.js Apr 24 javascript-malware-collection

9451fb7278a7e4632d8426cb61cf5bb643307d0f61b9edf10af3cc2095c44c68 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload

20161006_baea17af97c05393869e5e807c1fd182.js Apr 24 javascript-malware-collection

994cad009ca65a71a9a2966e04a2a5f890362731f1b91dd673fe819d9d176140 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_ae02268539965c065a524911ff30fa0b.js Apr 24 javascript-malware-collection

6c39cf41bd87cf0edf261da9af19d8dc529e4ba0e9e21557d15ffda704f13f78 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_60de5a4293ba516dd9edeb8b797a6ba3.js Apr 24 javascript-malware-collection

3acfc4dbfd6f994dbcc80e7c33fa5c9109084b779ca19af90f17eaa02adf0e90 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_2e7c4d04d0a9ef619ba395cc63332e2e.js Apr 24 javascript-malware-collection

ca4159008eaa6adca0a686875b15c5da7199a9613b442dfaa898f61b84a5f41a K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_548aa593784b3f11334d12b847ce1896.js Apr 24 javascript-malware-collection

f0c88205b1d22f410cad351d95f2fe87d43f938105eee318020305d332758869 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_6d9b87783644b0680a92da1ca01553e6.js Apr 24 javascript-malware-collection

b2647f966d0ee56ee8f1e2ec9f9a1a097c3b3b2d4de57a4b1180599a36440ed3 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_dd8428a4faa729d8d2de8258808b1422.js Apr 24 javascript-malware-collection

ed0864cfe4be1184990e02cfdc6e9203eb77661e7abe981516c5906e64107a57 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_9476e6e1f3d5ad821240f197e4ac00c7.js Apr 24 javascript-malware-collection

6d8eb48d52d2fa37c69cda62687ff1384212a5442c10eb75ce91c780435ae5e6 K(Li)O₂(As₆S)H₂(DbPo)Md

94% eval obfuscated payload

20161006_4f8c0658f03467385bab849557232d65.js Apr 24 javascript-malware-collection

5c69e782c5e7fa24073188b47760f0c297af3aa494b121577a2dfa3aef073e9a K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval execution

20161006_a2bb8139e658dd3b6f3f88a2437fbff9.js Apr 24 javascript-malware-collection

9b28f8240d35776d4bae9e0101af14de4e317f5544ed713b8d8e31b27db8ee5b K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload

20161006_70d55f9e8b1c1d85dd6a8f45e1ef5a6e.js Apr 24 javascript-malware-collection

2570396dc9201b026c33b8b2711b9b889172307240fe1eaff1cdd25b60496c25 K(Li)O₂(As₆S)H₂(DbPo)Md

string/reconstructstring/array

20161006_b33422ea31a3dded129091ee4ccca074.js Apr 24 javascript-malware-collection

94a775388ff9b73e470cbf54db1726914836577d3854a927748f287444891c64 K(Li)O₂(As₆S)H₂(DbPo)Md

94% obfuscated eval payload