crazy malware author - 48 layers of obfuscation

[SysAdMini]

 

http://www.cs.ucsb.edu/~marco/blog/2008/10/obfuscated-backdoor-or-joke.html

[Tigger`]

They are always trying to make it harder to detect things. 

[Orac]

Thats just crazy, if your going to go that far at least use 48 layers of different obfuscation techinques, not the same one recycled. Yet another skiddie with way too much time on their hands !!

[MysteryFCM]

LOL! ...... ya gotta love these skiddies

[julevine]

if someone finds a sample Can you post a rar file with the code so i can study it

thanks

[SysAdMini]

if someone finds a sample Can you post a rar file with the code so i can study it

thanks

I had contacted the author of the article (Marco Cova) and got a quick response.
Here is the sample. PW is "mdl".

Comment from Marco

I've attached the phishing kit that contains the sample. The code I was referring to on the blog is contained in the loginsubmit.php file. The file amen.php also looks similar.