PHP Malware Analysis

yca.php

md5: f7a4393a176dfc133a57232c07712a0a

Jump to: 

Screenshot
No Image
Attributes
Title

URLs
  • https://cdn-europe1.lanmedia.fr/var/europe1/storage/images/europe1/international/mais-que-veulent-les-anonymous-531400/10840608-1-fre-FR/Mais-que-veulent-les-Anonymous.jpg (Deobfuscated, Original)
  • https://fonts.googleapis.com/css?family=Orbitron:700 (Deobfuscated, Original)
  • https://image.winudf.com/v2/image1/ZC5hbmRyb2lkLndhbGxwYXBlci5zaW1wbGVibGFja19zY3JlZW5fMF8xNTY2OTk1ODU4XzAwOQ/screen-0.jpg?fakeurl=1&type=.jpg (Deobfuscated, Original)
  • https://www.mboxdrive.com/L (Deobfuscated, Original)

Deobfuscated PHP code





<html>


<head><br><br>


<link rel="shortcut icon" href="../i.hi"/>


<meta http-equiv="Content-Type" content="text/HTML; charset=utf-8" />


<title>hacked by hamza anonime </title><br>


<center>


<font color="#FF0000"><h1><b>Hacked By<font color="#FF0000"> Hamza Anonime </font></b></h1></font><br>





<img src="https://cdn-europe1.lanmedia.fr/var/europe1/storage/images/europe1/international/mais-que-veulent-les-anonymous-531400/10840608-1-fre-FR/Mais-que-veulent-les-Anonymous.jpg" width="350" height="230"></a>


 </center><br>





<link href="https://fonts.googleapis.com/css?family=Orbitron:700" rel="stylesheet" type="text/css">


<style>


body {font-family:orbitron;}


</style>


</head>


<body>


   <style>


body {


    background-image: url("https://image.winudf.com/v2/image1/ZC5hbmRyb2lkLndhbGxwYXBlci5zaW1wbGVibGFja19zY3JlZW5fMF8xNTY2OTk1ODU4XzAwOQ/screen-0.jpg?fakeurl=1&type=.jpg");





background-size: cover;


</style>


<center><br>


<font color="#FF0000" size=5><b>AnonimeXteam</b></font><br><br>


<font color="#FF0000"></font><font color="#FF0000"> </font><font color="#FF0000" size=4> *_* Hacking Is not a Crime </font><br><br>





<iframe width="0" height="0" scrolling="no" frameborder="no" allow="autoplay" src="https://www.mboxdrive.com/L'morphine%20-%20Morphiniya%2025%20(1).mp3"></iframe>



</body>


</html>



Execution traces
data/traces/f7a4393a176dfc133a57232c07712a0a_trace-1676240756.6075.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:26:22.505370]
1	0	1	0.000176	393512
1	3	0	0.000227	394568	{main}	1		/var/www/html/uploads/yca.php	0	0
1	3	1	0.000249	394568
			0.000282	314224
TRACE END   [2023-02-12 20:26:22.505513]


Generated HTML code
Original PHP code





<html>


<head><br><br>


<link rel="shortcut icon" href="../i.hi"/>


<meta http-equiv="Content-Type" content="text/HTML; charset=utf-8" />


<title>hacked by hamza anonime </title><br>


<center>


<font color="#FF0000"><h1><b>Hacked By<font color="#FF0000"> Hamza Anonime </font></b></h1></font><br>





<img src="https://cdn-europe1.lanmedia.fr/var/europe1/storage/images/europe1/international/mais-que-veulent-les-anonymous-531400/10840608-1-fre-FR/Mais-que-veulent-les-Anonymous.jpg" width="350" height="230"></a>


 </center><br>





<link href="https://fonts.googleapis.com/css?family=Orbitron:700" rel="stylesheet" type="text/css">


<style>


body {font-family:orbitron;}


</style>


</head>


<body>


   <style>


body {


    background-image: url("https://image.winudf.com/v2/image1/ZC5hbmRyb2lkLndhbGxwYXBlci5zaW1wbGVibGFja19zY3JlZW5fMF8xNTY2OTk1ODU4XzAwOQ/screen-0.jpg?fakeurl=1&type=.jpg");





background-size: cover;


</style>


<center><br>


<font color="#FF0000" size=5><b>AnonimeXteam</b></font><br><br>


<font color="#FF0000"></font><font color="#FF0000"> </font><font color="#FF0000" size=4> *_* Hacking Is not a Crime </font><br><br>





<iframe width="0" height="0" scrolling="no" frameborder="no" allow="autoplay" src="https://www.mboxdrive.com/L'morphine%20-%20Morphiniya%2025%20(1).mp3"></iframe>



</body>


</html>