ShellcodePattern in s-pt.ppstatic.pl

On 2019-01-21T09:35:20.723028+00:00 we found suspicious pattern ShellcodePattern, type: Suspicious, in the page https://s-pt.ppstatic.pl/o/js/osnowa.js…

The suspicious code sample:

b'unescape' … b'unescape' … b'unescape' … b'unescape' … b'%u0104' … b'%u0106' … b'%u0118' … b'%u0141' … b'%u0143' … b'%u015A' … b'%u017B' … b'%u0179' … b'%u0105' … b'%u0107' … b'%u0119' … b'%u0142' … b'%u0144' … b'%u015B' … b'%u017C' … b'%u017A'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!