Sponsor:
Server and Web Integrator
Link:
6.5.0
or
7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR
is open-source.
Donate and or Sponsorship always welcome.
Click to:
Donate...
MRatWork
Forum
Please
login
or
register
.
2017-11-07, 20:04:00
Home
Help
Search
Calendar
Login
Register
MRatWork Forum by Mustafa Ramadhan
»
Sawo Project - Kloxo-MR Discussions
»
Kloxo-MR Bugs and Requests
»
How to decode malware script
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: How to decode malware script (Read 1770 times)
0 Members and 1 Guest are viewing this topic.
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
How to decode malware script
«
on:
2015-10-02, 22:03:49 »
How to decode it - I need to know which functions does it use ?
Logged
MRatWork
Administrator
The Elite
Posts: 15,381
Karma: +112/-9
Gender:
Re: How to decode malware script
«
Reply #1 on:
2015-10-03, 01:51:30 »
It's use base64_decode. Try
https://www.tools4noobs.com/online_php_functions/base64_decode/
Logged
..::
MRatWork
(Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator -
Web Hosting
(Kloxo-MR READY!) --
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
Re: How to decode malware script
«
Reply #2 on:
2015-10-03, 19:41:54 »
I need base64 also for my scripts.
Logged
MRatWork
Administrator
The Elite
Posts: 15,381
Karma: +112/-9
Gender:
Re: How to decode malware script
«
Reply #3 on:
2015-10-03, 21:00:37 »
1. Locate file50.php to /tmp dir
2. Change 'eval(kcwhde($eypbq, $wdaxiwg));' to 'print(kcwhde($eypbq, $wdaxiwg));'
3. Run 'php /tmp/file50.php > /tmp/file50.src'
4. Investigate /tmp/file50.src'.
Logged
..::
MRatWork
(Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator -
Web Hosting
(Kloxo-MR READY!) --
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
Re: How to decode malware script
«
Reply #4 on:
2015-10-05, 13:24:44 »
Got it
Logged
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
Re: How to decode malware script
«
Reply #5 on:
2015-10-05, 13:38:15 »
What about such ?
Logged
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
Re: How to decode malware script
«
Reply #6 on:
2015-10-05, 13:52:55 »
Another one:
Logged
Spacedust
Super Grand Master
Posts: 3,944
Karma: +1/-0
Re: How to decode malware script
«
Reply #7 on:
2015-10-06, 20:24:38 »
Another one:
http://www.unphp.net/decode/28c0f04b8655b2dacce4b01411becd32/
Logged
Print
Pages: [
1
]
Go Up
« previous
next »
MRatWork Forum by Mustafa Ramadhan
»
Sawo Project - Kloxo-MR Discussions
»
Kloxo-MR Bugs and Requests
»
How to decode malware script
MRatWork Affiliates:
BIGRAF(R) Inc.
House of LMAR
EFARgrafix
Design By SMFSimple.com
SMF 2.0.14
|
SMF © 2017
,
Simple Machines
Page created in 0.038 seconds with 18 queries.