{"id":"111038fc6e3088decf401a9d917c5021","title":"0x-Obfuscated JS Dropper — 0x-Obfuscated JS Dropper · 下载器/投放器 · JS","md5":"111038fc6e3088decf401a9d917c5021","sha256":"1cb5138065690eac46e27dcf9cfdb95103a72473fe4052a486baa4c01d8e4e85","family":"0x-Obfuscated JS Dropper","apt":null,"verdict":null,"sample_type":"下载器/投放器","lang":"N","file_format":"JS","compiler":"N/A (Script)","published_at":"2026-08-09T16:00:00.000Z","summary":"0x-Obfuscated JS Dropper — 使用 _0x 模式变量名混淆的 JavaScript 投放器，包含 base64 编码的字符串表和动态解码逻辑。该家族共发现 4 个变种，代表样本 SHA256: 5013e61d66b8bddd...。脚本使用多种混淆技术隐藏恶意逻辑，通过 WScript/CScript 宿主执行，最终投放远程载荷或执行系统命令。","url":"https://zseceye.com/report/111038fc6e3088decf401a9d917c5021","json_url":"https://zseceye.com/report/111038fc6e3088decf401a9d917c5021.json","html_url":"https://zseceye.com/report/111038fc6e3088decf401a9d917c5021","hash_urls":{"md5":"https://zseceye.com/hash/111038fc6e3088decf401a9d917c5021","sha256":"https://zseceye.com/hash/1cb5138065690eac46e27dcf9cfdb95103a72473fe4052a486baa4c01d8e4e85"},"search_urls":{"md5":"https://zseceye.com/?q=111038fc6e3088decf401a9d917c5021","sha256":"https://zseceye.com/?q=1cb5138065690eac46e27dcf9cfdb95103a72473fe4052a486baa4c01d8e4e85"},"sample_download_url":"https://zseceye.com/report/111038fc6e3088decf401a9d917c5021/sample","sample_filename":"5013e61d.zip","iocs":[],"ips":[]}