PHP Malware Analysis

Back to list

Filename: sad.htm

Tags

URLs
Title
  • Stamped By SecrxtH4x0r

Deobfuscated code

<html>
	<head>
		<title>Stamped By SecrxtH4x0r </title>
		<meta name="description" content="Wh00pz ? Fuck You Security"/>
		<meta property="og:image" content="https://b.top4top.io/p_2158gydyk0.jpg"/>
	    <link rel="shortcut icon" href="https://b.top4top.io/p_2158gydyk0.jpg"/>
		<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/normalize.min.css">
        <link rel="stylesheet" href="https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css">
        </head>
        <style>
blink {
  -webkit-animation: 1.5s linear infinite kedip; /* for Safari 4.0 - 8.0 */
  animation: 1.5s linear infinite kedip;
}

/* for Safari 4.0 - 8.0 */
@-webkit-keyframes kedip { 
  0% {
    visibility: hidden;
  }
  50% {
    visibility: hidden;
  }
  100% {
    visibility: visible;
  }
}

@keyframes kedip {
  0% {
    visibility: hidden;
  }
  50% {
    visibility: hidden;
  }
  100% {
    visibility: visible;
  }
}
</style>
<body bgcolor="black">
	<font face="courier new">
		<font color="white">
	<table width=100% height=100%>
		<td align="center">
			<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js" type="text/javascript"></script>
			<center>
				<font color="white">
				<img src="https://b.top4top.io/p_2158gydyk0.jpg" height="250" width="250">
				<br><br>
				<blink><b><font size="5">Stamped By SecrxtH4x0r Ft SaraCans:)</b></blink>
				<br><br>
					<font size="3">
					<b><font color="red"></font> it's a pity it's not even so :)</b>
					<br><br>
						<font size="2">
									<b><font color="red">$</font> Tap Backgrounds For Sounds <font color="red">$</font></b>
							<script>

  function play(){

       var audio = document.getElementById("audio");

       audio.play();

                 }

   </script>



<body onclick="play()">

<audio id="audio" src="http://babaali.in/src/sad.mp3"></audio>

   

 </script>

Original code

<html>
	<head>
		<title>Stamped By SecrxtH4x0r </title>
		<meta name="description" content="Wh00pz ? Fuck You Security"/>
		<meta property="og:image" content="https://b.top4top.io/p_2158gydyk0.jpg"/>
	    <link rel="shortcut icon" href="https://b.top4top.io/p_2158gydyk0.jpg"/>
		<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/normalize.min.css">
        <link rel="stylesheet" href="https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css">
        </head>
        <style>
blink {
  -webkit-animation: 1.5s linear infinite kedip; /* for Safari 4.0 - 8.0 */
  animation: 1.5s linear infinite kedip;
}

/* for Safari 4.0 - 8.0 */
@-webkit-keyframes kedip { 
  0% {
    visibility: hidden;
  }
  50% {
    visibility: hidden;
  }
  100% {
    visibility: visible;
  }
}

@keyframes kedip {
  0% {
    visibility: hidden;
  }
  50% {
    visibility: hidden;
  }
  100% {
    visibility: visible;
  }
}
</style>
<body bgcolor="black">
	<font face="courier new">
		<font color="white">
	<table width=100% height=100%>
		<td align="center">
			<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js" type="text/javascript"></script>
			<center>
				<font color="white">
				<img src="https://b.top4top.io/p_2158gydyk0.jpg" height="250" width="250">
				<br><br>
				<blink><b><font size="5">Stamped By SecrxtH4x0r Ft SaraCans:)</b></blink>
				<br><br>
					<font size="3">
					<b><font color="red"></font> it's a pity it's not even so :)</b>
					<br><br>
						<font size="2">
									<b><font color="red">$</font> Tap Backgrounds For Sounds <font color="red">$</font></b>
							<script>

  function play(){

       var audio = document.getElementById("audio");

       audio.play();

                 }

   </script>



<body onclick="play()">

<audio id="audio" src="http://babaali.in/src/sad.mp3"></audio>

   

 </script>