PHP Malware Analysis
hoshi.htm
md5: bbc926c42a6cf44fa956b174a747e2b5
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Title
- Hacked by Skyzi Xploit (Deobfuscated, HTML, Original)
URLs
- https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg (Deobfuscated, HTML, Original)
- https://j.top4top.io/p_2279mhczk6.jpg (Deobfuscated, HTML, Original)
- https://stafaband123.com/app.php?id=1000701037 (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<html><head>
<title>Hacked by Skyzi Xploit</title>
<meta name="description" content="AkihikoGanz Ft Salsa Cans">
<link rel="icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<link rel="icon" type="image/x-icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta property="og:description" content=">
<meta property=" og:image" content="https://j.top4top.io/p_2279mhczk6.jpg">
<table width=100% height=100%><td align=center>
</head><br>
<body style="background-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" alink="#ee0000" link="#0000ee" vlink="#551a8b">
<div style="text-align: center;">
<span style="color: rgb(127, 127, 126);">
<span style="font-family: monospace;">
<span style="color: rgb(253, 253, 251);">Hacked by AkihikoGanz Ft Salsa Cans<br>
<img border="0" src="https://j.top4top.io/p_2279mhczk6.jpg" width="525" height="285"><br>
<br><br>
are you alright? ok let me cheer you up, don't panic, it's just a joke lolz, sankyu
<br><br>
<font color=white>Greetz : Zyy - Pipek1337 - Nekell404 - IkhwanaGanz - StarX - AkihikoGanz <br>Ghost7 - Queen Lars - Ucup-Kun - Galang10 - DX6GNSZ - ./XyZSennZ - And you.*<br><br></font>
<font color=white>Padang Blackhat - Japanese Hacker Rulez</font>
</span></span></span><br>
<body bgcolor="black" onclick="play()">
<div class="content">
<center>
<audio id="sec" __idm_id__="823202817"> <source src="https://stafaband123.com/app.php?id=1000701037" type="audio/mpeg"></audio>
</center>
</div>
<script>
var x = document.getElementById("sec");
function play() {
x.play();
}
function myFunction() {
var element = document.body;
element.classList.toggle("dark-mode");
}
function changeImage() {
if (document.getElementById("imgClickAndChange").src == "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg") {
document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
else { document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
}
</script>
</body>
</html>
Execution traces
Generated HTML code
<html><head>
<title>Hacked by Skyzi Xploit</title>
<meta name="description" content="AkihikoGanz Ft Salsa Cans">
<link rel="icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<link rel="icon" type="image/x-icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta property="og:description" content=">
<meta property=" og:image"="">
</head><body style="background-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" alink="#ee0000" link="#0000ee" vlink="#551a8b" bgcolor="black" onclick="play()"><table width="100%" height="100%"><tbody><tr><td align="center">
<br>
<div style="text-align: center;">
<span style="color: rgb(127, 127, 126);">
<span style="font-family: monospace;">
<span style="color: rgb(253, 253, 251);">Hacked by AkihikoGanz Ft Salsa Cans<br>
<img border="0" src="https://j.top4top.io/p_2279mhczk6.jpg" width="525" height="285"><br>
<br><br>
are you alright? ok let me cheer you up, don't panic, it's just a joke lolz, sankyu
<br><br>
<font color="white">Greetz : Zyy - Pipek1337 - Nekell404 - IkhwanaGanz - StarX - AkihikoGanz <br>Ghost7 - Queen Lars - Ucup-Kun - Galang10 - DX6GNSZ - ./XyZSennZ - And you.*<br><br></font>
<font color="white">Padang Blackhat - Japanese Hacker Rulez</font>
</span></span></span><br>
<div class="content">
<center>
<audio id="sec" __idm_id__="823202817"> <source src="https://stafaband123.com/app.php?id=1000701037" type="audio/mpeg"></audio>
</center>
</div>
<script>
var x = document.getElementById("sec");
function play() {
x.play();
}
function myFunction() {
var element = document.body;
element.classList.toggle("dark-mode");
}
function changeImage() {
if (document.getElementById("imgClickAndChange").src == "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg") {
document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
else { document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
}
</script>
</div></td></tr></tbody></table></body></html>Original PHP code
<html><head>
<title>Hacked by Skyzi Xploit</title>
<meta name="description" content="AkihikoGanz Ft Salsa Cans">
<link rel="icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<link rel="icon" type="image/x-icon" href="https://j.top4top.io/p_2279mhczk6.jpg">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta property="og:description" content=">
<meta property=" og:image" content="https://j.top4top.io/p_2279mhczk6.jpg">
<table width=100% height=100%><td align=center>
</head><br>
<body style="background-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" alink="#ee0000" link="#0000ee" vlink="#551a8b">
<div style="text-align: center;">
<span style="color: rgb(127, 127, 126);">
<span style="font-family: monospace;">
<span style="color: rgb(253, 253, 251);">Hacked by AkihikoGanz Ft Salsa Cans<br>
<img border="0" src="https://j.top4top.io/p_2279mhczk6.jpg" width="525" height="285"><br>
<br><br>
are you alright? ok let me cheer you up, don't panic, it's just a joke lolz, sankyu
<br><br>
<font color=white>Greetz : Zyy - Pipek1337 - Nekell404 - IkhwanaGanz - StarX - AkihikoGanz <br>Ghost7 - Queen Lars - Ucup-Kun - Galang10 - DX6GNSZ - ./XyZSennZ - And you.*<br><br></font>
<font color=white>Padang Blackhat - Japanese Hacker Rulez</font>
</span></span></span><br>
<body bgcolor="black" onclick="play()">
<div class="content">
<center>
<audio id="sec" __idm_id__="823202817"> <source src="https://stafaband123.com/app.php?id=1000701037" type="audio/mpeg"></audio>
</center>
</div>
<script>
var x = document.getElementById("sec");
function play() {
x.play();
}
function myFunction() {
var element = document.body;
element.classList.toggle("dark-mode");
}
function changeImage() {
if (document.getElementById("imgClickAndChange").src == "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg") {
document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
else { document.getElementById("imgClickAndChange").src = "https://cutewallpaper.org/21/anime-suicidal/Russian-State-Media-Says-Anime-Promotes-Teen-Suicide.jpg";
}
}
</script>
</body>
</html>