The popular malware researchers Marco Ramilli has analyzed a malware that remained under the radar for more than two years. The full path took me about hours work and the sample covers many obfuscation steps and implementation languages. During analysis time, only few Antivirus (6 out of 60) were able to detect the sample. The OOoo00 obfuscation technique has been used. The extracted Javascript (stage 2) looks like the following image. We now have every decoding parameter, we just need to decrypt the classes by using the following data:”]
Source: https://securityaffairs.co/wordpress/75478/malware/malware-reverse-engineering.html