Malware Analizi #2 | Angler EK JavaScript Gizleme Kaldırma

 [COLOR="Plum"]function decode(text) {
 
    var cryptKey = 'B5qV4g9RZmy6j7HUkhiz', //Extracted variable value
        rawArray = cryptKey.split(''),
        sortArray = cryptKey.split(''),
        keyArray = [];
 
    sortArray.sort();
    var keySize = sortArray.length;
    for (var i = 0; i < keySize; i++) {
        keyArray.push(rawArray.indexOf(sortArray[i]));
    }
 
    var k = keySize - text.length % keySize;
    for (var l = 0; l < k; l++) {
        text += ' ';
    }
 
    var endStr = '',
        i, j, line, newLine;
 
    for (i = 0; i < text.length; i += keySize) {
        line = text.substr(i, keySize).split('');
        newLine = '';
        for (j = 0; j < keySize; j++) {
            newLine += line[keyArray[j]];
        }
        endStr = endStr + newLine;
    }
    endStr = endStr.replace(/\s/g, '');
    return "\n" + endStr;
 
};
 
var URLs = ['B5qV4g9RZmy6j7HUkhiz', //Array of the values found on the landing page
            'THUHVpdvZQFUV5hWSLTSjDDkTJeMhalU8tldtYUaEUWmTiUNFLJpQVpStVz4nH Dd=Lo8  F YBc    ',
            'enkriouciaaf-lnetnsgytoouemhlcmin.wc.ma ',
            'Wic4Bp34bqruiXnbhwCFXoWYozKr5xzHBdgfpo-1Ij pkp1zh  d 5m. ?  ',
            'mW3mTfew1cR99IUdkZEHkm2FeIQNBXZ9VrNOqbE2m2UVMkVtdOMoVw0VfX10nXTDOhLo9NUNRsBcjOWx2WjDNiN0hNcMQwUN1MzzTGTWZ2M0IORIFwUMmMWh m  Z      I y      '];
 
for (var i = 0; i < URLs.length; i++) {
        print(decode(URLs[i], 0)); //Iterate through the array
}[/COLOR]