PHP Malware Analysis
index.html
md5: d05b3b7620074e589fc96b3ceb4fe6c5
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Title
- Tremor Cyber Team (Deobfuscated, HTML, Original)
URLs
- https://0janxlammer.blogspot.com (Deobfuscated, HTML, Original)
- https://b.top4top.io/m_23405lxwp4.mp3 (Deobfuscated, HTML, Original)
- https://fonts.googleapis.com/css?family=Kelly+Slab (Deobfuscated, HTML, Original)
- https://h.top4top.io/p_2332c2gfk1.png (Deobfuscated, HTML, Original)
- https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<!DOCTYPE html>
<html lang="en">
<head>
<link rel="icon" href="https://h.top4top.io/p_2332c2gfk1.png" type="image/x-icon">
<meta name="keywords" content="Sit">
<meta name="description" content=" Keep Silent And Study Many Thing's ">
<meta name="author" content="0janxLammer">
<meta name="theme-color" content="#343a40"/>
<title>Tremor Cyber Team</title>
<link href="https://fonts.googleapis.com/css?family=Kelly+Slab" rel="stylesheet" type="text/css">
<link rel="stylesheet" href="https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css"> <div class="glitch-wrapper">
<style>
body {
color: #FFFFFF;
font-family: "Kelly Slab", sans-serif;
font-weight: 60;
height: 80vh;
margin: 0;
background-color: black;
}
.hmm{
height: 67vh;
}
.ya {
align-items: center;
display: flex;
justify-content: center;
}
.udah{
position: relative;
}
.iya {
text-align: center;
}
</style>
</head>
<body>
<div class="hmm ya udah">
<div class="iya">
<img src="https://h.top4top.io/p_2332c2gfk1.png" alt="" width="500" height="480">
<br>
<br>
<br>
<div class="glitch" data-text="0janxLammer">
<font color="white" face="5"><font color="red">Hacked By?? <font color="white">Tremor Cyber Team</font></font></font></font></font>
</div>
<br><br>
<font size="6" color="yellow">
#Greetz: <br>
<font color="red"></font>[#] IrulXploit & fitr4xgans ~ 4 BROTHER SIMPATI || MR.L1NU3X ~ 3XPLOIT.ID || MASKYY ~ INDONEHACK CREW || 0janxLammer ~ Tremor Cyber Team || Farel07 ~ NineSec || Galang10 ~ PONOROGO1337 || anon7 ~ AnonSec || Parkerzanta ~ 22XploiterCrew [#]
</font>
<br><br>
<font size="6" color="lime">{ Only Unlucky Days Not Your Failed Life }</font></font>
<br>
<br>
<style type="text/css"> .lagu{ background:transparent; border:2px solid red; font-family:Share Tech Mono; color:white; font-size:15x; font-weight:bold; padding:3px 29px; text-decoration:none; text-shadow:0px 0px 0px ; } </style>
<script> function play(){ var audio = document.getElementById('lagu'); audio.play(); } function liat(){ document.getElementById('galiat').style.visibility='visible'; } </script>
<button class="lagu" onclick="play();liat();"><font face="graduate" size="4" color="" >Play Music</font></button><audio id="lagu" src="https://b.top4top.io/m_23405lxwp4.mp3"></audio><font color="white"> </font><button class="lagu" onclick="window.location.href='https://0janxlammer.blogspot.com'"><font face="graduate" size="4" color="" ><b>Fans Page</b></font></button></center>
<br>
<br>
<i><font color="white" size="4">Powered By <a target=_blank href="https:"" style="text-decoration: none;"><font color="white"> 0janxLammer - Indonesian Hacker Rulezz
<br>
</i></a>
</div>
</div>
</body>
</html>Execution traces
Generated HTML code
<html lang="en"><head>
<link rel="icon" href="https://h.top4top.io/p_2332c2gfk1.png" type="image/x-icon">
<meta name="keywords" content="Sit">
<meta name="description" content=" Keep Silent And Study Many Thing's ">
<meta name="author" content="0janxLammer">
<meta name="theme-color" content="#343a40">
<title>Tremor Cyber Team</title>
<link href="https://fonts.googleapis.com/css?family=Kelly+Slab" rel="stylesheet" type="text/css">
<link rel="stylesheet" href="https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css"> </head><body><div class="glitch-wrapper">
<style>
body {
color: #FFFFFF;
font-family: "Kelly Slab", sans-serif;
font-weight: 60;
height: 80vh;
margin: 0;
background-color: black;
}
.hmm{
height: 67vh;
}
.ya {
align-items: center;
display: flex;
justify-content: center;
}
.udah{
position: relative;
}
.iya {
text-align: center;
}
</style>
<div class="hmm ya udah">
<div class="iya">
<img src="https://h.top4top.io/p_2332c2gfk1.png" alt="" width="500" height="480">
<br>
<br>
<br>
<div class="glitch" data-text="0janxLammer">
<font color="white" face="5"><font color="red">Hacked By?? <font color="white">Tremor Cyber Team</font></font></font>
</div>
<br><br>
<font size="6" color="yellow">
#Greetz: <br>
<font color="red"></font>[#] IrulXploit & fitr4xgans ~ 4 BROTHER SIMPATI || MR.L1NU3X ~ 3XPLOIT.ID || MASKYY ~ INDONEHACK CREW || 0janxLammer ~ Tremor Cyber Team || Farel07 ~ NineSec || Galang10 ~ PONOROGO1337 || anon7 ~ AnonSec || Parkerzanta ~ 22XploiterCrew [#]
</font>
<br><br>
<font size="6" color="lime">{ Only Unlucky Days Not Your Failed Life }</font>
<br>
<br>
<style type="text/css"> .lagu{ background:transparent; border:2px solid red; font-family:Share Tech Mono; color:white; font-size:15x; font-weight:bold; padding:3px 29px; text-decoration:none; text-shadow:0px 0px 0px ; } </style>
<script> function play(){ var audio = document.getElementById('lagu'); audio.play(); } function liat(){ document.getElementById('galiat').style.visibility='visible'; } </script>
<button class="lagu" onclick="play();liat();"><font face="graduate" size="4" color="">Play Music</font></button><audio id="lagu" src="https://b.top4top.io/m_23405lxwp4.mp3"></audio><font color="white"> </font><button class="lagu" onclick="window.location.href='https://0janxlammer.blogspot.com'"><font face="graduate" size="4" color=""><b>Fans Page</b></font></button>
<br>
<br>
<i><font color="white" size="4">Powered By <a target="_blank" href="https:" "="" style="text-decoration: none;"><font color="white"> 0janxLammer - Indonesian Hacker Rulezz
<br>
</font></a></font></i><font color="white" size="4"><font color="white">
</font></font></div><font color="white" size="4"><font color="white">
</font></font></div><font color="white" size="4"><font color="white">
</font></font></div></body></html>Original PHP code
<!DOCTYPE html>
<html lang="en">
<head>
<link rel="icon" href="https://h.top4top.io/p_2332c2gfk1.png" type="image/x-icon">
<meta name="keywords" content="Sit">
<meta name="description" content=" Keep Silent And Study Many Thing's ">
<meta name="author" content="0janxLammer">
<meta name="theme-color" content="#343a40"/>
<title>Tremor Cyber Team</title>
<link href="https://fonts.googleapis.com/css?family=Kelly+Slab" rel="stylesheet" type="text/css">
<link rel="stylesheet" href="https://rawcdn.githack.com/nako48/shiraookaaaa/f37b3bb82ba199ac8df3a394d8652e56872935a9/style-css.css"> <div class="glitch-wrapper">
<style>
body {
color: #FFFFFF;
font-family: "Kelly Slab", sans-serif;
font-weight: 60;
height: 80vh;
margin: 0;
background-color: black;
}
.hmm{
height: 67vh;
}
.ya {
align-items: center;
display: flex;
justify-content: center;
}
.udah{
position: relative;
}
.iya {
text-align: center;
}
</style>
</head>
<body>
<div class="hmm ya udah">
<div class="iya">
<img src="https://h.top4top.io/p_2332c2gfk1.png" alt="" width="500" height="480">
<br>
<br>
<br>
<div class="glitch" data-text="0janxLammer">
<font color="white" face="5"><font color="red">Hacked By?? <font color="white">Tremor Cyber Team</font></font></font></font></font>
</div>
<br><br>
<font size="6" color="yellow">
#Greetz: <br>
<font color="red"></font>[#] IrulXploit & fitr4xgans ~ 4 BROTHER SIMPATI || MR.L1NU3X ~ 3XPLOIT.ID || MASKYY ~ INDONEHACK CREW || 0janxLammer ~ Tremor Cyber Team || Farel07 ~ NineSec || Galang10 ~ PONOROGO1337 || anon7 ~ AnonSec || Parkerzanta ~ 22XploiterCrew [#]
</font>
<br><br>
<font size="6" color="lime">{ Only Unlucky Days Not Your Failed Life }</font></font>
<br>
<br>
<style type="text/css"> .lagu{ background:transparent; border:2px solid red; font-family:Share Tech Mono; color:white; font-size:15x; font-weight:bold; padding:3px 29px; text-decoration:none; text-shadow:0px 0px 0px ; } </style>
<script> function play(){ var audio = document.getElementById('lagu'); audio.play(); } function liat(){ document.getElementById('galiat').style.visibility='visible'; } </script>
<button class="lagu" onclick="play();liat();"><font face="graduate" size="4" color="" >Play Music</font></button><audio id="lagu" src="https://b.top4top.io/m_23405lxwp4.mp3"></audio><font color="white"> </font><button class="lagu" onclick="window.location.href='https://0janxlammer.blogspot.com'"><font face="graduate" size="4" color="" ><b>Fans Page</b></font></button></center>
<br>
<br>
<i><font color="white" size="4">Powered By <a target=_blank href="https:"" style="text-decoration: none;"><font color="white"> 0janxLammer - Indonesian Hacker Rulezz
<br>
</i></a>
</div>
</div>
</body>
</html>