PHP Malware Analysis

Back to list

Filename: index.html

Tags

URLs
Title
  • Hacked by TN.MDK

Deobfuscated code

<HTML>
<head>
<link rel="icon" type="image/png" href="https://lh3.googleusercontent.com/-71pFn4Vadtg/YjKkrWU5lfI/AAAAAAAAAAc/0duh0WapmCg9KMoRw2v81VSuhf9k9RiuQCNcBGAsYHQ/h240/20210327_215833.png"/>
<title>Hacked by TN.MDK</title>
<meta name="description" content="your site  hass been hacked">
<body bgcolor="black">
    <style>
     pre{
         color:white;
     }
        
        img{
            opacity: 70%;
            border-radius: 7%;
        }
    </style>
</body>
 <table width="100%" height="50%">
 <tbody>
  <tr>
   <td align="center">
<center>
<pre>
                                                 .------.------.    
  +-------------+                     ___        |      |      |    
  |             |                     \ /]       |      |      |    
  |             |        _           _(_)        |      |      |    
  |             |     ___))         [  | \___    |      |      |    
  |             |     ) //o          | |     \   |      |      |    
  |             |  _ (_    >         | |      ]  |      |      |    
  |          __ | (O)  \__<          | | ____/   '------'------'    
  |         /  o| [/] /   \)        [__|/_                          
  |             | [\]|  ( \         __/___\_____                    
  |             | [/]|   \ \__  ___|            |                   
  |             | [\]|    \___E/%%/|____________|_____              
  |             | [/]|=====__   (_____________________)             
  |             | [\] \_____ \    |                  |              
  |             | [/========\ |   |                  |              
  |             | [\]     []| |   |                  |              
  |             | [/]     []| |_  |                  |              
  |             | [\]     []|___) |                  |              
====================================================================
</pre>
<p></p>
<font size="4px" face="courier new" color="white"> Hacked by TN.MDK </font>
<p></p>
<font size="4px" face="courier new" color="white"> Message</font>
<p></p><font size="4px" face="courier new" color="white"> hello admin of your website I defaced because there was a bug that was not fixed </font>
<p></p><font color="white" size="4px" face="courier New">Thanks To</font>
<p></p><font color="white" size="4px" face="courier New">| Bali Blackhat | K0R3X TEM3N T3AM | Cowok Tersakiti Team | TsecNetwork |</font>
<p></p><marquee width="50%"><font size="4px" face="courier new" color="white">ARD1K4_G4NS ~ MR.CRS ~ MR.Ngebug Kluyut :3 ~ CepuSosial ~ MR.tregear ~ DR4GON3/TEMO ~ Pixie ~ ./SaklarRusak ~ and You</font></marquee>
<p></p><font size="4px" face="courier new" color="white">- just for fun -</font>
<br><br>


Original code

<HTML>
<head>
<link rel="icon" type="image/png" href="https://lh3.googleusercontent.com/-71pFn4Vadtg/YjKkrWU5lfI/AAAAAAAAAAc/0duh0WapmCg9KMoRw2v81VSuhf9k9RiuQCNcBGAsYHQ/h240/20210327_215833.png"/>
<title>Hacked by TN.MDK</title>
<meta name="description" content="your site  hass been hacked">
<body bgcolor="black">
    <style>
     pre{
         color:white;
     }
        
        img{
            opacity: 70%;
            border-radius: 7%;
        }
    </style>
</body>
 <table width="100%" height="50%">
 <tbody>
  <tr>
   <td align="center">
<center>
<pre>
                                                 .------.------.    
  +-------------+                     ___        |      |      |    
  |             |                     \ /]       |      |      |    
  |             |        _           _(_)        |      |      |    
  |             |     ___))         [  | \___    |      |      |    
  |             |     ) //o          | |     \   |      |      |    
  |             |  _ (_    >         | |      ]  |      |      |    
  |          __ | (O)  \__<          | | ____/   '------'------'    
  |         /  o| [/] /   \)        [__|/_                          
  |             | [\]|  ( \         __/___\_____                    
  |             | [/]|   \ \__  ___|            |                   
  |             | [\]|    \___E/%%/|____________|_____              
  |             | [/]|=====__   (_____________________)             
  |             | [\] \_____ \    |                  |              
  |             | [/========\ |   |                  |              
  |             | [\]     []| |   |                  |              
  |             | [/]     []| |_  |                  |              
  |             | [\]     []|___) |                  |              
====================================================================
</pre>
<p></p>
<font size="4px" face="courier new" color="white"> Hacked by TN.MDK </font>
<p></p>
<font size="4px" face="courier new" color="white"> Message</font>
<p></p><font size="4px" face="courier new" color="white"> hello admin of your website I defaced because there was a bug that was not fixed </font>
<p></p><font color="white" size="4px" face="courier New">Thanks To</font>
<p></p><font color="white" size="4px" face="courier New">| Bali Blackhat | K0R3X TEM3N T3AM | Cowok Tersakiti Team | TsecNetwork |</font>
<p></p><marquee width="50%"><font size="4px" face="courier new" color="white">ARD1K4_G4NS ~ MR.CRS ~ MR.Ngebug Kluyut :3 ~ CepuSosial ~ MR.tregear ~ DR4GON3/TEMO ~ Pixie ~ ./SaklarRusak ~ and You</font></marquee>
<p></p><font size="4px" face="courier new" color="white">- just for fun -</font>
<br><br>