PHP Malware Analysis

Back to list

Filename: 1.html

Tags

URLs
Title
  • HACKED BY mrfikou39

Deobfuscated code

<html><head>
<title>HACKED BY mrfikou39</title>
</head>
<body bgcolor="#000000">
<center>
<br>
<font color="#FF0000" face="Courier New" size="6">mrfikou39 WAS HERE</font>
<br>
<br>
<img src="http://img455.imageshack.us/img455/2928/lolwg9ro0.jpg" height="" width="">
<br>
<br>
<font color="#008000" face="Courier New" size="5">im hacker algerien </font>
<br>
<font color="#00FF00" face="Courier New" size="4"> </font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<font color="#FF0000" face="Courier New" size="7"></font>
<br>
<font color="#00FF00" face="Courier New" size="5"></font>
<br>
<font color="#0000FF" face="Courier New" size="4"></font>
<br>
<font color="#00FF00" face="Courier New" size="5"</font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<br>
<object type="application/x-shockwave-flash" data="http://flash-mp3-player.net/medias/player_mp3_mini.swf" width="200" height="20">
<br>
<param name="movie" value="http://flash-mp3-player.net/medias/player_mp3_mini.swf">
<br>
<param name="bgcolor" value="#000000">
<br>
<param name="FlashVars" value="mp3=http://catonmat.net/blog/wp-content/plugins/wp-downloadMonitor/user_uploads/leech_axss-hax_that_fuck.mp3 &autoplay=1">
<br>
</object>
<br>
</center>


</body></html>


Original code

<html><head>
<title>HACKED BY mrfikou39</title>
</head>
<body bgcolor="#000000">
<center>
<br>
<font color="#FF0000" face="Courier New" size="6">mrfikou39 WAS HERE</font>
<br>
<br>
<img src="http://img455.imageshack.us/img455/2928/lolwg9ro0.jpg" height="" width="">
<br>
<br>
<font color="#008000" face="Courier New" size="5">im hacker algerien </font>
<br>
<font color="#00FF00" face="Courier New" size="4"> </font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<font color="#FF0000" face="Courier New" size="7"></font>
<br>
<font color="#00FF00" face="Courier New" size="5"></font>
<br>
<font color="#0000FF" face="Courier New" size="4"></font>
<br>
<font color="#00FF00" face="Courier New" size="5"</font>
<br>
<font color="#00FF00" face="Courier New" size="4"></font>
<br>
<br>
<object type="application/x-shockwave-flash" data="http://flash-mp3-player.net/medias/player_mp3_mini.swf" width="200" height="20">
<br>
<param name="movie" value="http://flash-mp3-player.net/medias/player_mp3_mini.swf">
<br>
<param name="bgcolor" value="#000000">
<br>
<param name="FlashVars" value="mp3=http://catonmat.net/blog/wp-content/plugins/wp-downloadMonitor/user_uploads/leech_axss-hax_that_fuck.mp3 &autoplay=1">
<br>
</object>
<br>
</center>


</body></html>