PHP Malware Analysis
idn.htm
md5: 31c314da0dc902a23941e0e43d231755
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Title
- Hacked By Wedus Ft Zx-Rst1337 (Deobfuscated, HTML, Original)
URLs
- http://www.nobsec.net/favicon.ico (Deobfuscated, HTML, Original)
- https://fjr.nasiwebhost.com/gambar/Wedus.jpg (Deobfuscated, HTML, Original)
- https://fonts.googleapis.com/css?family=Iceland (Deobfuscated, HTML, Original)
- https://www.youtube.com/embed/BZwn2XBQROE?rel=0& (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<html>
<head>
<title>Hacked By Wedus Ft Zx-Rst1337</title>
<meta name="keywords" content="Defaced by Wedus" />
<meta name="keywords" content="Defaced by Wedus"/>
</head>
<link href='https://fonts.googleapis.com/css?family=Iceland' rel='stylesheet' type='text/css'>
<link href='http://www.nobsec.net/favicon.ico' rel='icon' type='image/x-icon'/>
<style type="text/css">
body {
background:black;
color:#FFFFFF;
text-decoration:none;
font-family: Iceland;
font-size:20px;
}
</style>
<body>
<center><br>
<img src="https://fjr.nasiwebhost.com/gambar/Wedus.jpg" width="20%" ></img><br>
<h1 style="font-family: Iceland; font-size: 30px; color: white;" >"Hacked by Wedus Ft Zx-Rst1337"</h1>
<p> Thanks To : <br>
Rajawali Sec Team || Dark exploiter cyber || Clan X12<br><br><br>
<br><br>
<iframe width="0" height="0" src="https://www.youtube.com/embed/BZwn2XBQROE?rel=0&autoplay=1" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
</html>
Execution traces
Generated HTML code
<html><head>
<title>Hacked By Wedus Ft Zx-Rst1337</title>
<meta name="keywords" content="Defaced by Wedus">
<meta name="keywords" content="Defaced by Wedus">
<link href="https://fonts.googleapis.com/css?family=Iceland" rel="stylesheet" type="text/css"><link href="http://www.nobsec.net/favicon.ico" rel="icon" type="image/x-icon"><style type="text/css">
body {
background:black;
color:#FFFFFF;
text-decoration:none;
font-family: Iceland;
font-size:20px;
}
</style></head>
<body>
<center><br>
<img src="https://fjr.nasiwebhost.com/gambar/Wedus.jpg" width="20%"><br>
<h1 style="font-family: Iceland; font-size: 30px; color: white;">"Hacked by Wedus Ft Zx-Rst1337"</h1>
<p> Thanks To : <br>
Rajawali Sec Team || Dark exploiter cyber || Clan X12<br><br><br>
<br><br>
<iframe width="0" height="0" src="https://www.youtube.com/embed/BZwn2XBQROE?rel=0&autoplay=1" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe>
</p></center></body></html>Original PHP code
<html>
<head>
<title>Hacked By Wedus Ft Zx-Rst1337</title>
<meta name="keywords" content="Defaced by Wedus" />
<meta name="keywords" content="Defaced by Wedus"/>
</head>
<link href='https://fonts.googleapis.com/css?family=Iceland' rel='stylesheet' type='text/css'>
<link href='http://www.nobsec.net/favicon.ico' rel='icon' type='image/x-icon'/>
<style type="text/css">
body {
background:black;
color:#FFFFFF;
text-decoration:none;
font-family: Iceland;
font-size:20px;
}
</style>
<body>
<center><br>
<img src="https://fjr.nasiwebhost.com/gambar/Wedus.jpg" width="20%" ></img><br>
<h1 style="font-family: Iceland; font-size: 30px; color: white;" >"Hacked by Wedus Ft Zx-Rst1337"</h1>
<p> Thanks To : <br>
Rajawali Sec Team || Dark exploiter cyber || Clan X12<br><br><br>
<br><br>
<iframe width="0" height="0" src="https://www.youtube.com/embed/BZwn2XBQROE?rel=0&autoplay=1" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
</html>