What a cool hostname.
images.rar is a payload downloaded by Reveton (cf here)
The sql database have 4 tables: `balances`, `content`, `geoip_isp`, `stat_ips`
Just the basic, landing for Italian ransom.
And traces of german landing
Code comments and variables name are in english
By looking the code source of pages i've see that "shared.php" is used as panel with GET req only