PHP Malware Analysis
run.php
md5: ad8d90b80043a51ed9ccdae2b908c96e
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Title
- Hacked By Hamza Anonime (Deobfuscated, HTML, Original)
URLs
- https://fonts.googleapis.com/css?family=Iceland (Deobfuscated, HTML, Original)
- https://j.top4top.io/m_2043o8kke0.mp3 (Deobfuscated, HTML, Original)
- https://j.top4top.io/p_2043yb67p0.jpg (Deobfuscated, HTML, Original)
- https://www.facebook.com/Root.Hamza.Anonime (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<html>
<title>Hacked By Hamza Anonime</title>
<link rel="icon" type="image/png" href="https://j.top4top.io/p_2043yb67p0.jpg" />
<link href="https://fonts.googleapis.com/css?family=Iceland" rel="stylesheet" type="text/css">
<link href="resource://firefox.abs.avira.com/css/content/content.css%3F1401271904314" type="text/css" rel="stylesheet">
<link href="resource://firefox.abs.avira.com/css/content/search.css%3F1401271904317" type="text/css" rel="stylesheet">
</head><body><center><img style="width: 200px;" src="https://j.top4top.io/p_2043yb67p0.jpg">
<br>
<font style="color:gb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 30px;" face="Iceland"> Hacked By Hamza Anonime - Moroccan Hackers</font>
<br><br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 19px;" face="Iceland">Everyone wants to change the world around them, but no one thinks of changing themselves!</font>
<br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 20px;" face="Iceland">My friends : My pc -</font>
<br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 22px;" face="Iceland"><a class="Facebook" href="https://www.facebook.com/Root.Hamza.Anonime">Facebook</a><a href="</b>" target="_blank" style="color: rgb(0, 0, 0);"></a></font>
<iframe frameborder="0" height="1" width="1" loop="true" allow="autoplay" src="https://j.top4top.io/m_2043o8kke0.mp3"></iframe>
</html>Execution traces
data/traces/ad8d90b80043a51ed9ccdae2b908c96e_trace-1676239013.4656.xtVersion: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 19:57:19.363474]
1 0 1 0.000224 393512
1 3 0 0.000278 394568 {main} 1 /var/www/html/uploads/run.php 0 0
1 3 1 0.000300 394568
0.000332 314224
TRACE END [2023-02-12 19:57:19.363623]
Generated HTML code
<html><head><title>Hacked By Hamza Anonime</title>
<link rel="icon" type="image/png" href="https://j.top4top.io/p_2043yb67p0.jpg">
<link href="https://fonts.googleapis.com/css?family=Iceland" rel="stylesheet" type="text/css">
<link href="resource://firefox.abs.avira.com/css/content/content.css%3F1401271904314" type="text/css" rel="stylesheet">
<link href="resource://firefox.abs.avira.com/css/content/search.css%3F1401271904317" type="text/css" rel="stylesheet">
</head><body><center><img style="width: 200px;" src="https://j.top4top.io/p_2043yb67p0.jpg">
<br>
<font style="color:gb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 30px;" face="Iceland"> Hacked By Hamza Anonime - Moroccan Hackers</font>
<br><br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 19px;" face="Iceland">Everyone wants to change the world around them, but no one thinks of changing themselves!</font>
<br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 20px;" face="Iceland">My friends : My pc -</font>
<br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 22px;" face="Iceland"><a class="Facebook" href="https://www.facebook.com/Root.Hamza.Anonime">Facebook</a><a href="</b>" target="_blank" style="color: rgb(0, 0, 0);"></a></font>
<iframe frameborder="0" height="1" width="1" loop="true" allow="autoplay" src="https://j.top4top.io/m_2043o8kke0.mp3"></iframe>
</center></body></html>Original PHP code
<html>
<title>Hacked By Hamza Anonime</title>
<link rel="icon" type="image/png" href="https://j.top4top.io/p_2043yb67p0.jpg" />
<link href="https://fonts.googleapis.com/css?family=Iceland" rel="stylesheet" type="text/css">
<link href="resource://firefox.abs.avira.com/css/content/content.css%3F1401271904314" type="text/css" rel="stylesheet">
<link href="resource://firefox.abs.avira.com/css/content/search.css%3F1401271904317" type="text/css" rel="stylesheet">
</head><body><center><img style="width: 200px;" src="https://j.top4top.io/p_2043yb67p0.jpg">
<br>
<font style="color:gb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 30px;" face="Iceland"> Hacked By Hamza Anonime - Moroccan Hackers</font>
<br><br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 19px;" face="Iceland">Everyone wants to change the world around them, but no one thinks of changing themselves!</font>
<br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 20px;" face="Iceland">My friends : My pc -</font>
<br><br><br>
<font style="color: rgb(0, 0, 0); text-shadow: rgb(0, 0, 0) 0px 1px 5px; font-size: 22px;" face="Iceland"><a class="Facebook" href="https://www.facebook.com/Root.Hamza.Anonime">Facebook</a><a href="</b>" target="_blank" style="color: rgb(0, 0, 0);"></a></font>
<iframe frameborder="0" height="1" width="1" loop="true" allow="autoplay" src="https://j.top4top.io/m_2043o8kke0.mp3"></iframe>
</html>