PHP Malware Analysis

Back to list

Filename: hoshi.htm

Tags

URLs
Title
  • Hacked by Skyzi Xploit

Deobfuscated code

<html><head> 
  <title>Hacked by Skyzi Xploit</title>
  <meta name="description" content="AkihikoGanz Ft Salsa Cans">
  <link rel="icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
  <link rel="icon" type="image/x-icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta property="og:description" content=">



<meta property=" og:image" content="https://j.top4top.io/p_2279mhczk6.jpg">
<table width=100% height=100%><td align=center>
</head><br>
<body style="background-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" alink="#ee0000" link="#0000ee" vlink="#551a8b">
<div style="text-align: center;">
<span style="color: rgb(127, 127, 126);">
<span style="font-family: monospace;">
<span style="color: rgb(253, 253, 251);">Hacked by AkihikoGanz Ft Salsa Cans<br>
<img border="0" src="https://j.top4top.io/p_2279mhczk6.jpg" width="525" height="285"><br>
<br><br>
are you alright? ok let me cheer you up, don't panic, it's just a joke lolz, sankyu
<br><br>
<font color=white>Greetz : Zyy - Pipek1337 - Nekell404 - IkhwanaGanz - StarX - AkihikoGanz <br>Ghost7 - Queen Lars - Ucup-Kun - Galang10 - DX6GNSZ  - ./XyZSennZ - And you.*<br><br></font>
<font color=white>Padang Blackhat - Japanese Hacker Rulez</font>
</span></span></span><br>
<body bgcolor="black" onclick="play()">
<div class="content">
<center>
<audio id="sec" __idm_id__="823202817"> <source src="https://stafaband123.com/app.php?id=1000701037" type="audio/mpeg"></audio>
</center>
</div>
<script>



    var x = document.getElementById("sec");



    function play() {



      x.play(); 	



    } 	 	



    function myFunction() { 		 



      var element = document.body; 



      element.classList.toggle("dark-mode"); 



    } 



    function changeImage() { 



      if (document.getElementById("imgClickAndChange").src == "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg") { 



          document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg"; 



        } 



      else { document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg"; 



      } 



    } 



    </script>
</body>
</html>


Original code

<html><head> 
  <title>Hacked by Skyzi Xploit</title>
  <meta name="description" content="AkihikoGanz Ft Salsa Cans">
  <link rel="icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
  <link rel="icon" type="image/x-icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
  <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta property="og:description" content=">



<meta property=" og:image" content="https://j.top4top.io/p_2279mhczk6.jpg">
<table width=100% height=100%><td align=center>
</head><br>
<body style="background-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" alink="#ee0000" link="#0000ee" vlink="#551a8b">
<div style="text-align: center;">
<span style="color: rgb(127, 127, 126);">
<span style="font-family: monospace;">
<span style="color: rgb(253, 253, 251);">Hacked by AkihikoGanz Ft Salsa Cans<br>
<img border="0" src="https://j.top4top.io/p_2279mhczk6.jpg" width="525" height="285"><br>
<br><br>
are you alright? ok let me cheer you up, don't panic, it's just a joke lolz, sankyu
<br><br>
<font color=white>Greetz : Zyy - Pipek1337 - Nekell404 - IkhwanaGanz - StarX - AkihikoGanz <br>Ghost7 - Queen Lars - Ucup-Kun - Galang10 - DX6GNSZ  - ./XyZSennZ - And you.*<br><br></font>
<font color=white>Padang Blackhat - Japanese Hacker Rulez</font>
</span></span></span><br>
<body bgcolor="black" onclick="play()">
<div class="content">
<center>
<audio id="sec" __idm_id__="823202817"> <source src="https://stafaband123.com/app.php?id=1000701037" type="audio/mpeg"></audio>
</center>
</div>
<script>



    var x = document.getElementById("sec");



    function play() {



      x.play(); 	



    } 	 	



    function myFunction() { 		 



      var element = document.body; 



      element.classList.toggle("dark-mode"); 



    } 



    function changeImage() { 



      if (document.getElementById("imgClickAndChange").src == "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg") { 



          document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg"; 



        } 



      else { document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg"; 



      } 



    } 



    </script>
</body>
</html>