PHP Malware Analysis

Back to list

Filename: c99.txt?

Tags

URLs
Title
  • Loading...

Deobfuscated code

<html><head><title>Loading...</title></head><body><script type='text/javascript'>window.location.replace('http://www.sh3ll.org/c99.txt?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY0ODkyMzMwOSwiaWF0IjoxNjQ4OTE2MTA5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIycmgyMHRvMzFtZjJiNmowYXMwOXIzNGMiLCJuYmYiOjE2NDg5MTYxMDksInRzIjoxNjQ4OTE2MTA5MDk1MjkwfQ.TK9uG40BnXWdQkYEHKX0s4TuEwAdOls38Pk7NK_X9EU&sid=10f80b1e-b2a0-11ec-a0ca-925c279296bc');</script></body></html>


Original code

<html><head><title>Loading...</title></head><body><script type='text/javascript'>window.location.replace('http://www.sh3ll.org/c99.txt?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY0ODkyMzMwOSwiaWF0IjoxNjQ4OTE2MTA5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIycmgyMHRvMzFtZjJiNmowYXMwOXIzNGMiLCJuYmYiOjE2NDg5MTYxMDksInRzIjoxNjQ4OTE2MTA5MDk1MjkwfQ.TK9uG40BnXWdQkYEHKX0s4TuEwAdOls38Pk7NK_X9EU&sid=10f80b1e-b2a0-11ec-a0ca-925c279296bc');</script></body></html>