PHP Malware Analysis

data.php

md5: 82a989b3895a25d7237067dc7ec567c8

Jump to: 

Screenshot
Attributes
Title
  • 404 Not Found (HTML)

Deobfuscated PHP code
<?php

session_start();
if (isset($_SESSION['logged']) && !empty($_SESSION['logged'])) {
    include "../database.php";
    include '_header.php';
    ?>

<div class="container">
	<h2>Data Kelulusan</h2><hr>
	<div class="row col-sm-8">
		<form class="form-horizontal well" method="post" action="data_upload.php" enctype="multipart/form-data">
			<div class="form-group">
				<label for="importCsv" class="col-sm-3 control-label">CSV/Excel File</label>
				<div class="col-sm-9">
					<div class="fileinput fileinput-new input-group" data-provides="fileinput">
						<div class="form-control" data-trigger="fileinput">
							<i class="glyphicon glyphicon-file fileinput-exists"></i> <span class="fileinput-filename"></span>
						</div>
						<span class="input-group-addon btn btn-default btn-file">
							<span class="fileinput-new">Pilih file</span>
							<span class="fileinput-exists">Ganti</span>
							<input type="file" name="file">
						</span>
						<a href="#" class="input-group-addon btn btn-default fileinput-exists" data-dismiss="fileinput">Buang</a>
					</div>
				</div>
			</div>
			<div class="form-group">
				<div class="col-sm-offset-3 col-sm-9">
					<button type="submit" name="submit" class="btn btn-default">Upload</button>
				</div>
			</div>
		</form>
	</div>
</div>
<div class="row">
	<div class="container">
		<table class="table table-bordered">
			<thead>
				<tr>
					<th rowspan="2">No. Ujian</th>
					<th rowspan="2">Nama Siswa</th>
					<th rowspan="2">Kompetensi Keahlian</th>
					<th colspan="4">Nilai UN</th>
					<th rowspan="2">Status</th>
				</tr>
				<tr>
					<th>Bahasa Indonesia</th>
					<th>Bahasa Inggris</th>
					<th>Matematika</th>
					<th>Kejuruan</th>
				</tr>
			</thead>
			<tbody>
			<?php 
    $qsiswa = mysqli_query($db_conn, "SELECT * FROM un_siswa");
    if (mysqli_num_rows($qsiswa) > 0) {
        while ($data = mysqli_fetch_array($qsiswa)) {
            echo "<tr>";
            echo '<td>' . $data['no_ujian'] . '</td>';
            echo '<td>' . $data['nama'] . '</td>';
            echo '<td>' . $data['komli'] . '</td>';
            echo '<td>' . $data['n_bin'] . '</td>';
            echo '<td>' . $data['n_big'] . '</td>';
            echo '<td>' . $data['n_mat'] . '</td>';
            echo '<td>' . $data['n_kejuruan'] . '</td>';
            echo "<td>";
            echo $data['status'] == 1 ? 'Lulus' : '<em>Tidak Lulus</em>';
            echo "</td>";
            echo "</tr>";
        }
    } else {
        echo "<tr><td colspan=\"8\"><em>Belum ada data! Segera lakukan upload data.</em></td></tr>";
    }
    ?>
			</tbody>
		</table>
	</div>
</div>
<?php 
    include '_footer.php';
} else {
    header('Location: ./login.php');
}
Execution traces
data/traces/82a989b3895a25d7237067dc7ec567c8_trace-1676256246.956.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:44:32.853856]
1	0	1	0.000174	393512
1	3	0	0.000261	402208	{main}	1		/var/www/html/uploads/data.php	0	0
2	4	0	0.000277	402208	session_start	0		/var/www/html/uploads/data.php	2	0
2	4	1	0.000331	402960
2	4	R			TRUE
2	5	0	0.000348	402960	header	0		/var/www/html/uploads/data.php	84	1	'Location: ./login.php'
2	5	1	0.000364	403056
2	5	R			NULL
1	3	1	0.000378	403024
			0.000405	314880
TRACE END   [2023-02-13 00:44:32.854122]


Generated HTML code
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.52 (Ubuntu) Server at localhost Port 80</address>

</body></html>
Original PHP code
<?php
session_start();
if(isset($_SESSION['logged']) && !empty($_SESSION['logged'])){
include "../database.php";
include '_header.php';
?>

<div class="container">
	<h2>Data Kelulusan</h2><hr>
	<div class="row col-sm-8">
		<form class="form-horizontal well" method="post" action="data_upload.php" enctype="multipart/form-data">
			<div class="form-group">
				<label for="importCsv" class="col-sm-3 control-label">CSV/Excel File</label>
				<div class="col-sm-9">
					<div class="fileinput fileinput-new input-group" data-provides="fileinput">
						<div class="form-control" data-trigger="fileinput">
							<i class="glyphicon glyphicon-file fileinput-exists"></i> <span class="fileinput-filename"></span>
						</div>
						<span class="input-group-addon btn btn-default btn-file">
							<span class="fileinput-new">Pilih file</span>
							<span class="fileinput-exists">Ganti</span>
							<input type="file" name="file">
						</span>
						<a href="#" class="input-group-addon btn btn-default fileinput-exists" data-dismiss="fileinput">Buang</a>
					</div>
				</div>
			</div>
			<div class="form-group">
				<div class="col-sm-offset-3 col-sm-9">
					<button type="submit" name="submit" class="btn btn-default">Upload</button>
				</div>
			</div>
		</form>
	</div>
</div>
<div class="row">
	<div class="container">
		<table class="table table-bordered">
			<thead>
				<tr>
					<th rowspan="2">No. Ujian</th>
					<th rowspan="2">Nama Siswa</th>
					<th rowspan="2">Kompetensi Keahlian</th>
					<th colspan="4">Nilai UN</th>
					<th rowspan="2">Status</th>
				</tr>
				<tr>
					<th>Bahasa Indonesia</th>
					<th>Bahasa Inggris</th>
					<th>Matematika</th>
					<th>Kejuruan</th>
				</tr>
			</thead>
			<tbody>
			<?php
			$qsiswa = mysqli_query($db_conn,"SELECT * FROM un_siswa");
			
			if(mysqli_num_rows($qsiswa) > 0){
				while($data = mysqli_fetch_array($qsiswa)){
					echo '<tr>';
					echo '<td>'.$data['no_ujian'].'</td>';
					echo '<td>'.$data['nama'].'</td>';
					echo '<td>'.$data['komli'].'</td>';
					echo '<td>'.$data['n_bin'].'</td>';
					echo '<td>'.$data['n_big'].'</td>';
					echo '<td>'.$data['n_mat'].'</td>';
					echo '<td>'.$data['n_kejuruan'].'</td>';
					echo '<td>';
					echo ($data['status']==1) ? 'Lulus' : '<em>Tidak Lulus</em>';
					echo '</td>';
					echo '</tr>';
				}
			} else {
				echo '<tr><td colspan="8"><em>Belum ada data! Segera lakukan upload data.</em></td></tr>';
			}
			?>
			</tbody>
		</table>
	</div>
</div>
<?php
include '_footer.php';
} else {
	header('Location: ./login.php');
}
?>