PHP Malware Analysis

u100.php, u414x.php

md5: 20c187b09f8e46db8ebae2d5af1eeb68

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<?php

echo "a";
Execution traces
data/traces/20c187b09f8e46db8ebae2d5af1eeb68_trace-1676242226.9625.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:50:52.860364]
1	0	1	0.000142	393512
1	3	0	0.000184	393064	{main}	1		/var/www/html/uploads/u414x.php	0	0
1	3	1	0.000200	393064
			0.000224	314224
TRACE END   [2023-02-12 20:50:52.860473]


data/traces/20c187b09f8e46db8ebae2d5af1eeb68_trace-1676262328.7448.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 02:25:54.642611]
1	0	1	0.000164	393512
1	3	0	0.000205	393064	{main}	1		/var/www/html/uploads/u100.php	0	0
1	3	1	0.000222	393064
			0.000247	314224
TRACE END   [2023-02-13 02:25:54.642724]


Generated HTML code
<html><head></head><body>a</body></html>
Original PHP code
<?php echo "a";