PHP Malware Analysis

Kal.html

md5: 5a0dc983f11d2259cd2205f493d0811f

Jump to:

Screenshot


Attributes

Title

URLs
  • https://ibb.co/dpGK3tN (HTML, Original)
  • https://www.seekpng.com/png/detail/69-699731_guy-render-by-xdarkivyx-on-deviantart-sad-boy.png (HTML, Original)


Deobfuscated PHP code

Failed to deobfuscate code

Execution traces


Generated HTML code

<html lang="en"><head>
    <title>Pwned by K4LS </title>
    <style>
    body {
            background: #000;
            -webkit-background-size: cover;
            -moz-background-size: cover;
            -o-background-size: cover;
            background-size: cover;
            color: white;
        }
        
        .title1 {
            font-family: sans-serif;
            font-size: 30px;
            color: white;
        }
        
        .text {
            font-family: Tahoma;
            font-size: 20px;
            color: grey;
        }
        
        .text:hover {
            font-family: Tahoma;
            font-size: 21px;
            color: white;
        }
    }
    </style>
</head>

<body>
    <center>
        <!--?<table width=100% height=100%--><br>
  <a href="https://ibb.co/dpGK3tN" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://www.seekpng.com/png/detail/69-699731_guy-render-by-xdarkivyx-on-deviantart-sad-boy.png" height="312" width="320"></a><br><br>
<div class="title1" style="color:green"><strong>K4L$</strong></div>
<div class="title1" style="color:green"><strong>WAS H3RE</strong></div><br><br>
<div class="text">Hi Admin, Your Website Has Been Hacked</div>
<div class="text">Please Fix Your Website SECURITY</div>
<div class="text">I Don't Have Intention To Steal And</div>
<div class="text">Sell Any Data Unless U Didn't Fix It ASAP</div><br>
<div class="text">-K4L$-</div>
 <div id="bar" style="position: fixed; width: 100%; bottom: 0px; font-family: Tahoma; height: 20px; color: white; font-size: 13px; left: 0px; border-top: 1px solid #000; padding: 5px; background-color: #000"> 
<center> WE SEE YOU ● WE HEAR YOU ● DON'T MESS WITH US </center></div>




</center></body></html>

Original PHP code

<html lang="en">
<head>
    <title>Pwned by K4LS </title>
    <style>
    body {
            background: #000;
            -webkit-background-size: cover;
            -moz-background-size: cover;
            -o-background-size: cover;
            background-size: cover;
            color: white;
        }
        
        .title1 {
            font-family: sans-serif;
            font-size: 30px;
            color: white;
        }
        
        .text {
            font-family: Tahoma;
            font-size: 20px;
            color: grey;
        }
        
        .text:hover {
            font-family: Tahoma;
            font-size: 21px;
            color: white;
        }
    }
    </style>
</head>

<body>
    <center>
        <?<table width=100% height=100%><td align=center><br>
  <a href="https://ibb.co/dpGK3tN" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://www.seekpng.com/png/detail/69-699731_guy-render-by-xdarkivyx-on-deviantart-sad-boy.png" height="312" width="320" /></a></div><br><br>
<DIV class=title1 style="color:green"><strong>K4L$</strong></DIV>
<DIV class=title1 style="color:green"><strong>WAS H3RE</strong></DIV><br><br>
<DIV class=text>Hi Admin, Your Website Has Been Hacked</DIV>
<DIV class=text>Please Fix Your Website SECURITY</DIV>
<DIV class=text>I Don't Have Intention To Steal And</DIV>
<DIV class=text>Sell Any Data Unless U Didn't Fix It ASAP</DIV><br>
<DIV class=text>-K4L$-</DIV>
 <div id=bar style="position: fixed; width: 100%; bottom: 0px; font-family: Tahoma; height: 20px; color: white; font-size: 13px; left: 0px; border-top: 1px solid #000; padding: 5px; background-color: #000"> 
<CENTER> WE SEE YOU &#9679; WE HEAR YOU &#9679; DON'T MESS WITH US </CENTER></div>


</body>
</html>