PHP Malware Analysis

index.php

md5: 572f9a162da15889ffc6ba5be14fb359

Jump to: 

Screenshot
Attributes
Title

URLs

Deobfuscated PHP code
<html>
<title>Hacked By SecurityBus</title><style type="text/css">
<!--
.style1 {font-size: 36.0pt}
.style2 {font-size: 14.0pt}
-->
</style><LINK 
href="http://img80.imageshack.us/img80/3262/icorp.jpg" rel="shortcut icon">
</head>
<body bgcolor=black lang=TR link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal align=center style='text-align:center'><b><font size=7
color=white face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;
font-family:"Bodoni MT Poster Compressed";color:white;font-weight:bold'>Hacked By </span></font></b>
<b><font size=7 color=red
face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'>SecurityBus</span></font></b></p>
<center><img src="https://imagizer.imageshack.com/img923/6603/XAT35N.jpg"  alt=  width="225" width="333" height="315">
</center>
<p class=MsoNormal align=center style='text-align:center'><b><font size=7
color=white face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;
font-family:"Bodoni MT Poster Compressed";color:white;font-weight:bold'>Sorry Admin Your Site Has Been </span></font></b>
<b><font size=7 color=red
face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'>Hacked</span></font></b></p>
<p class=MsoNormal align=center style='text-align:center'><b><font size=4
color=white face="Bodoni MT Poster Compressed"><span style='font-size:14.0pt;font-family:"Bodoni MT Poster Compressed";
color:white;font-weight:bold'></span></font><font
size=4 color=red face="Bodoni MT Poster Compressed"><span style='font-size:14.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'></span></font></b></p>
</div>
</body>
</html>

Execution traces
data/traces/572f9a162da15889ffc6ba5be14fb359_trace-1676237851.7737.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 19:37:57.671524]
1	0	1	0.000127	393512
1	3	0	0.000167	395080	{main}	1		/var/www/html/uploads/index.php	0	0
1	3	1	0.000183	395080
			0.000206	314224
TRACE END   [2023-02-12 19:37:57.671629]


Generated HTML code
<html><head><title>Hacked By SecurityBus</title><style type="text/css">
<!--
.style1 {font-size: 36.0pt}
.style2 {font-size: 14.0pt}
-->
</style><link href="http://img80.imageshack.us/img80/3262/icorp.jpg" rel="shortcut icon">
</head>
<body bgcolor="black" lang="TR" link="blue" vlink="purple">
<div class="Section1">
<p class="MsoNormal" align="center" style="text-align:center"><b><font size="7" color="white" face="Bodoni MT Poster Compressed"><span style="font-size:36.0pt;
font-family:&quot;Bodoni MT Poster Compressed&quot;;color:white;font-weight:bold">Hacked By </span></font></b>
<b><font size="7" color="red" face="Bodoni MT Poster Compressed"><span style="font-size:36.0pt;font-family:
&quot;Bodoni MT Poster Compressed&quot;;color:red;font-weight:bold">SecurityBus</span></font></b></p>
<center><img src="https://imagizer.imageshack.com/img923/6603/XAT35N.jpg" alt="width=&quot;225&quot;" width="333" height="315">
</center>
<p class="MsoNormal" align="center" style="text-align:center"><b><font size="7" color="white" face="Bodoni MT Poster Compressed"><span style="font-size:36.0pt;
font-family:&quot;Bodoni MT Poster Compressed&quot;;color:white;font-weight:bold">Sorry Admin Your Site Has Been </span></font></b>
<b><font size="7" color="red" face="Bodoni MT Poster Compressed"><span style="font-size:36.0pt;font-family:
&quot;Bodoni MT Poster Compressed&quot;;color:red;font-weight:bold">Hacked</span></font></b></p>
<p class="MsoNormal" align="center" style="text-align:center"><b><font size="4" color="white" face="Bodoni MT Poster Compressed"><span style="font-size:14.0pt;font-family:&quot;Bodoni MT Poster Compressed&quot;;
color:white;font-weight:bold"></span></font><font size="4" color="red" face="Bodoni MT Poster Compressed"><span style="font-size:14.0pt;font-family:
&quot;Bodoni MT Poster Compressed&quot;;color:red;font-weight:bold"></span></font></b></p>
</div>


</body></html>
Original PHP code
<html>
<title>Hacked By SecurityBus</title><style type="text/css">
<!--
.style1 {font-size: 36.0pt}
.style2 {font-size: 14.0pt}
-->
</style><LINK 
href="http://img80.imageshack.us/img80/3262/icorp.jpg" rel="shortcut icon">
</head>
<body bgcolor=black lang=TR link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal align=center style='text-align:center'><b><font size=7
color=white face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;
font-family:"Bodoni MT Poster Compressed";color:white;font-weight:bold'>Hacked By </span></font></b>
<b><font size=7 color=red
face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'>SecurityBus</span></font></b></p>
<center><img src="https://imagizer.imageshack.com/img923/6603/XAT35N.jpg"  alt=  width="225" width="333" height="315">
</center>
<p class=MsoNormal align=center style='text-align:center'><b><font size=7
color=white face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;
font-family:"Bodoni MT Poster Compressed";color:white;font-weight:bold'>Sorry Admin Your Site Has Been </span></font></b>
<b><font size=7 color=red
face="Bodoni MT Poster Compressed"><span style='font-size:36.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'>Hacked</span></font></b></p>
<p class=MsoNormal align=center style='text-align:center'><b><font size=4
color=white face="Bodoni MT Poster Compressed"><span style='font-size:14.0pt;font-family:"Bodoni MT Poster Compressed";
color:white;font-weight:bold'></span></font><font
size=4 color=red face="Bodoni MT Poster Compressed"><span style='font-size:14.0pt;font-family:
"Bodoni MT Poster Compressed";color:red;font-weight:bold'></span></font></b></p>
</div>
</body>
</html>