PHP Malware Analysis

Back to list

Tags

Encoding
base64_decode
base64_encode
URLs
http://ccteam.ru/releases/c99shell
http://ccteam.ru
http://ccteam.ru/releases/c99shell
http://ccteam.ru/releases/update/c99shell/
http://ccteam.ru/releases/cc99shell
http://ccteam.ru
http://www.r57.gen.tr/yazciz/ciz.js
http://wwp.icq.com/scripts/contact.dll?msgto=656555
http://wwp.icq.com/scripts/online.dll?icq=656555&img=5
http://r57.gen.tr
Emails
user@host.tld
c99shell@inbox.ru
Execution
system
eval
exec
passthru
shell_exec
Input
_GET
_POST
Environment
set_time_limit
error_reporting
php_uname

Deobfuscated code



Original code