generic_javascript_obfuscation in rubberproff.dk

On 2019-11-28T08:15:57.411853+00:00 we found suspicious pattern generic_javascript_obfuscation, type: Suspicious, (JavaScript obfuscation is frequently used to hide malicious code (or with hope to protect intellectual property)) in the page http://rubberproff.dk/

The suspicious code sample:

b'atob' … b'atob' … b'"ogRemoveEventListener"' … b'"application/wlwmanifest+xml"' … b'"application/json+oembed"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"nitropack/inlinescript"' … b'"MTU3NDg4NTQ2MC4zNTc4"' … b'"MTU3NDg4NTc5MC41MzI4"' … b'"MTU3NDg4NTY2Mi41Mzc0"' … b'"MTU3NDg4NjA1NS40MDYz"' … b'"MTU3NDg4NjAwNS41NDM0"' … b'"MTU3NDg4NTg4OC41NDcx"' … b'"MTU3NDg4NTk1Ni41NTA1"' … b'"MTU3NDg4NTYzMi41NTM4"' … b'"MTU3NDg4NTU0My41NTYx"' … b'"MTU3NDg4NTM0NC41NTgz"' … b'"MTU3NDg4NTU2Ny41NjA3"' … b'"MTU3NDg4NTY4NC40MTc5"' … b'"MTU3NDg4NTIwNy40MjA3"' … b'"MTU3NDg4NTU0MC41NjI5"' … b'"MTU3NDg4NTMyNi40MjMz"' … b'"MTU3NDg4NTg2NC40MjU1"' … b'"MTU3NDg4NTM1OC40MzQ5"' … b'"MTU3NDg4NTgzNS41NjUx"' … b'"MTU3NDg4NTUwOC41NTUz"' … b'"MTU3NDg4NTkyNS41NjY5"' … b'"MTU3NDg4NTY5NS41NTg0"' … b'"MTU3NDg4NTE4OC41Njg0"' … b'"MTU3NDg4NTM1MC41NjA5"' … b'"MTU3NDg4NTc0MC41NjM2"' … b'"MTU3NDg4NTY3MC41NzE2"' … b'"MTU3NDg4NTY2My41NzMx"' … b'"MTU3NDg4NTQ1OS41NzQ1"' … b'"MTU3NDg4NTQ3OS41NjY5"' … b'"MTU3NDg4NTc3OC41Nzcz"' … b'"MTU3NDg4NTczMy41NzE5"' … b'"MTU3NDg4NjEyMy41Nzg3"' … b'"MTU3NDg4NTY2MC41NzM1"' … b'"MTU3NDg4NTY0NC41ODA0"' … b'"MTU3NDg4NTk1Ny41ODIy"' … b'"MTU3NDg4NTM5Mi41NzYx"'

This feature is experimental so please feel free to contact us if you feel any of the reported issues is a false positive or you want to suggest a pattern that should be detected (we are using Yara standard).

Fully automated RESTful API is now available. Subscribe for your free trial today!