PHP Malware Analysis
dream.html
md5: 6df4a90bcccb32465e280e676f3296a9
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Title
- Whooopzzzzz (Deobfuscated, HTML, Original)
URLs
- https://c.top4top.io/p_2456w0k6n0.png (Deobfuscated, HTML, Original)
- https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRrIjzk6MDVBTKr9kFqvMaKmg9lrSlQ9UTKvQ (Deobfuscated, HTML, Original)
- https://fonts.googleapis.com/css?family=Shadows+Into+Light+Two (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<html>
<head>
<title>Whooopzzzzz</title>
<meta property="og:image"content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRrIjzk6MDVBTKr9kFqvMaKmg9lrSlQ9UTKvQ">
<meta name="description" content="I'am Just A Devil"> <meta name="keywords" content="Ghost Riddiculous Team">
<meta http-equiv="cache-control" content="index,cache">
<meta http-equiv="pragma" content="index,cache">
<style>
html{
background-color:#FFFFFF;
color: #001933;
font-family: Playball
}
a:hover {
color: #001933;
}
</style>
<br><center>
<img src="https://c.top4top.io/p_2456w0k6n0.png"><br>
</style>
</head>
<body>
<table height="30%" width="100%">
<body>
<tr>
<p>
<br><br><br><br><br><td align="center">
<link href="https://fonts.googleapis.com/css?family=Shadows+Into+Light+Two" rel="stylesheet" type="text/css">
<div id="q">
<br><br><br><br><br><br><br><br><br><center><span class="blinking"><font face ="Shadows Into Light Two" font size ="50">HACKED BY ./RRQ_JORDI</font></span></center>
<style type="text/css">BODY{cursor:none}</style> </font>
</div>
</center>
<font face="Shadows Into Light Two">
<center>
<style type="text/css">BODY{cursor:none}</style>
<style type="text/css">
.blinking{
animation:blinkingText 0.8s infinite;
}
@keyframes blinkingText{
0%{ color: #ff0027; }
20%{ color: #0c00ff; }
40%{ color: white; }
60%{ color: #00e800; }
80%{ color: red; }
100%{ color: #d0ff00; }
}
</style>
<style>
.blink {
animation: blink-animation 1s steps(5, start) infinite;
-webkit-animation: blink-animation 1s steps(5, start) infinite;
}
@keyframes blink-animation {
to {
visibility: hidden;
}
}
@-webkit-keyframes blink-animation {
to {
visibility: hidden;
}
}
</style>
<span class="blink"> -=[My Whole Life Is Just A Dream]=- </span>
<br><br>
</body>
</br></b></font></td></tr></tbody></table></center></a></td></tr></tbody></table></center></body></html>Execution traces
Generated HTML code
<html><head>
<title>Whooopzzzzz</title>
<meta property="og:image" content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRrIjzk6MDVBTKr9kFqvMaKmg9lrSlQ9UTKvQ">
<meta name="description" content="I'am Just A Devil"> <meta name="keywords" content="Ghost Riddiculous Team">
<meta http-equiv="cache-control" content="index,cache">
<meta http-equiv="pragma" content="index,cache">
<style>
html{
background-color:#FFFFFF;
color: #001933;
font-family: Playball
}
a:hover {
color: #001933;
}
</style>
</head><body><br><center>
<img src="https://c.top4top.io/p_2456w0k6n0.png"><br>
<p>
<br><br><br><br><br></p><table height="30%" width="100%">
<tbody><tr>
<td align="center">
<link href="https://fonts.googleapis.com/css?family=Shadows+Into+Light+Two" rel="stylesheet" type="text/css">
<div id="q">
<br><br><br><br><br><br><br><br><br><center><span class="blinking"><font face="Shadows Into Light Two" font="" size="50">HACKED BY ./RRQ_JORDI</font></span></center>
<style type="text/css">BODY{cursor:none}</style>
</div>
<font face="Shadows Into Light Two">
</font><center><font face="Shadows Into Light Two">
<style type="text/css">BODY{cursor:none}</style>
<style type="text/css">
.blinking{
animation:blinkingText 0.8s infinite;
}
@keyframes blinkingText{
0%{ color: #ff0027; }
20%{ color: #0c00ff; }
40%{ color: white; }
60%{ color: #00e800; }
80%{ color: red; }
100%{ color: #d0ff00; }
}
</style>
<style>
.blink {
animation: blink-animation 1s steps(5, start) infinite;
-webkit-animation: blink-animation 1s steps(5, start) infinite;
}
@keyframes blink-animation {
to {
visibility: hidden;
}
}
@-webkit-keyframes blink-animation {
to {
visibility: hidden;
}
}
</style>
<span class="blink"> -=[My Whole Life Is Just A Dream]=- </span>
<br><br>
<br></font></center></td></tr></tbody></table></center></body></html>Original PHP code
<html>
<head>
<title>Whooopzzzzz</title>
<meta property="og:image"content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRrIjzk6MDVBTKr9kFqvMaKmg9lrSlQ9UTKvQ">
<meta name="description" content="I'am Just A Devil"> <meta name="keywords" content="Ghost Riddiculous Team">
<meta http-equiv="cache-control" content="index,cache">
<meta http-equiv="pragma" content="index,cache">
<style>
html{
background-color:#FFFFFF;
color: #001933;
font-family: Playball
}
a:hover {
color: #001933;
}
</style>
<br><center>
<img src="https://c.top4top.io/p_2456w0k6n0.png"><br>
</style>
</head>
<body>
<table height="30%" width="100%">
<body>
<tr>
<p>
<br><br><br><br><br><td align="center">
<link href="https://fonts.googleapis.com/css?family=Shadows+Into+Light+Two" rel="stylesheet" type="text/css">
<div id="q">
<br><br><br><br><br><br><br><br><br><center><span class="blinking"><font face ="Shadows Into Light Two" font size ="50">HACKED BY ./RRQ_JORDI</font></span></center>
<style type="text/css">BODY{cursor:none}</style> </font>
</div>
</center>
<font face="Shadows Into Light Two">
<center>
<style type="text/css">BODY{cursor:none}</style>
<style type="text/css">
.blinking{
animation:blinkingText 0.8s infinite;
}
@keyframes blinkingText{
0%{ color: #ff0027; }
20%{ color: #0c00ff; }
40%{ color: white; }
60%{ color: #00e800; }
80%{ color: red; }
100%{ color: #d0ff00; }
}
</style>
<style>
.blink {
animation: blink-animation 1s steps(5, start) infinite;
-webkit-animation: blink-animation 1s steps(5, start) infinite;
}
@keyframes blink-animation {
to {
visibility: hidden;
}
}
@-webkit-keyframes blink-animation {
to {
visibility: hidden;
}
}
</style>
<span class="blink"> -=[My Whole Life Is Just A Dream]=- </span>
<br><br>
</body>
</br></b></font></td></tr></tbody></table></center></a></td></tr></tbody></table></center></body></html>