PHP Malware Analysis

z-xsc1.html

md5: 2789027af0608baf10bcd902e1427cf7

Jump to:

Screenshot


Attributes

Title

URLs


Deobfuscated PHP code

<!DOCTYPE HTML>
<html>
  <head>
  	<meta property="og:image" content="https://c.top4top.io/p_1824ef8ri0.jpg">



	<meta name="description" content="Hahaha BITCH!!! "> 



	<meta name="og:title" content="Hacked BY Zxploit7">



	<meta http-equiv="cache-control" content="index,cache"> 



	<meta http-equiv="pragma" content="index,cache"> 
		
    <title>Hacked BY Zxploit7 </title>
  </head>
<body bgcolor="white">
  <center>
    <font color="white" size="6" face="Courier New">
<marquee bgcolor="black">-----KAMU BUTUH ISTIRAHAT KAWAN-----</marquee></font><br>
    <img width="600" src="https://i.gifer.com/o6m.gif"><br>
    <font color="black" size="8" face="Courier New"><b>Hacked BY Zxploit7</b></font><br><br><br><br><br>
    <font color="black" size="6" face="Courier New"><b>Stay Calm, Don't Give Up, And Be Grateful For What :)<br> <br> INDONESIAN HACKER RULEZ 2K22</b></font><br><br><br>
    <audio id="audioNotifikasi">
  <source src="https://j.top4top.io/m_2311db1bz0.mp3" type="audio/mpeg">
</audio>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="playAudio()" type="button"><font face="monaco" size="5" color="black">Play to Music</font></button>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="pauseAudio()" type="button"><font face="monaco" size="5" color="black">Pause to Music</font></button> <br>
<script type="text/javascript">
var el = document.getElementById("audioNotifikasi"); 
function playAudio() { 
  el.play(); 
} 
function pauseAudio() { 
  el.pause(); 
} 
</script><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
<font color="white" size="6" face="Courier New">
<marquee bgcolor="black">LAIN KALI JANGAN LUPA UNTUK BERSANTAI YA KARENA ITU PENTING:)</marquee></font>
  </center>
</body>
</html>

Execution traces


Generated HTML code

<html><head>
  	<meta property="og:image" content="https://c.top4top.io/p_1824ef8ri0.jpg">



	<meta name="description" content="Hahaha BITCH!!! "> 



	<meta name="og:title" content="Hacked BY Zxploit7">



	<meta http-equiv="cache-control" content="index,cache"> 



	<meta http-equiv="pragma" content="index,cache"> 
		
    <title>Hacked BY Zxploit7 </title>
  </head>
<body bgcolor="white">
  <center>
    <font color="white" size="6" face="Courier New">
<marquee bgcolor="black">-----KAMU BUTUH ISTIRAHAT KAWAN-----</marquee></font><br>
    <img width="600" src="https://i.gifer.com/o6m.gif"><br>
    <font color="black" size="8" face="Courier New"><b>Hacked BY Zxploit7</b></font><br><br><br><br><br>
    <font color="black" size="6" face="Courier New"><b>Stay Calm, Don't Give Up, And Be Grateful For What :)<br> <br> INDONESIAN HACKER RULEZ 2K22</b></font><br><br><br>
    <audio id="audioNotifikasi">
  <source src="https://j.top4top.io/m_2311db1bz0.mp3" type="audio/mpeg">
</audio>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="playAudio()" type="button"><font face="monaco" size="5" color="black">Play to Music</font></button>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="pauseAudio()" type="button"><font face="monaco" size="5" color="black">Pause to Music</font></button> <br>
<script type="text/javascript">
var el = document.getElementById("audioNotifikasi"); 
function playAudio() { 
  el.play(); 
} 
function pauseAudio() { 
  el.pause(); 
} 
</script><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
<font color="white" size="6" face="Courier New">
<marquee bgcolor="black">LAIN KALI JANGAN LUPA UNTUK BERSANTAI YA KARENA ITU PENTING:)</marquee></font>
  </center>

</body></html>

Original PHP code

<!DOCTYPE HTML>
<html>
  <head>
  	<meta property="og:image" content="https://c.top4top.io/p_1824ef8ri0.jpg">



	<meta name="description" content="Hahaha BITCH!!! "> 



	<meta name="og:title" content="Hacked BY Zxploit7">



	<meta http-equiv="cache-control" content="index,cache"> 



	<meta http-equiv="pragma" content="index,cache"> 
		
    <title>Hacked BY Zxploit7 </title>
  </head>
<body bgcolor="white">
  <center>
    <font color="white" size="6" face="Courier New">
<marquee bgcolor="black">-----KAMU BUTUH ISTIRAHAT KAWAN-----</marquee></font><br>
    <img width="600" src="https://i.gifer.com/o6m.gif"><br>
    <font color="black" size="8" face="Courier New"><b>Hacked BY Zxploit7</b></font><br><br><br><br><br>
    <font color="black" size="6" face="Courier New"><b>Stay Calm, Don't Give Up, And Be Grateful For What :)<br> <br> INDONESIAN HACKER RULEZ 2K22</b></font><br><br><br>
    <audio id="audioNotifikasi">
  <source src="https://j.top4top.io/m_2311db1bz0.mp3" type="audio/mpeg">
</audio>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="playAudio()" type="button"><font face="monaco" size="5" color="black">Play to Music</font></button>
<button style="border:2px solid black; border-radius:30px; background-color:white;" onclick="pauseAudio()" type="button"><font face="monaco" size="5" color="black">Pause to Music</font></button> <br>
<script type="text/javascript">
var el = document.getElementById("audioNotifikasi"); 
function playAudio() { 
  el.play(); 
} 
function pauseAudio() { 
  el.pause(); 
} 
</script><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
<font color="white" size="6" face="Courier New">
<marquee bgcolor="black">LAIN KALI JANGAN LUPA UNTUK BERSANTAI YA KARENA ITU PENTING:)</marquee></font>
  </center>
</body>
</html>