PHP Malware Analysis

SHA256SUMS

md5: 28a4671a8e50f1a05af6254222f74234

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
23754944047dd29fd93d7a486bb19a087e33e7d59bddd92a7e20ac75f92697c9 *config.json
dde19847f562d394335223a4ae8bd32dc326e172e34b095ace2db37ba5ba839d *xmrig

Execution traces
Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">23754944047dd29fd93d7a486bb19a087e33e7d59bddd92a7e20ac75f92697c9 *config.json
dde19847f562d394335223a4ae8bd32dc326e172e34b095ace2db37ba5ba839d *xmrig
</pre></body></html>
Original PHP code
23754944047dd29fd93d7a486bb19a087e33e7d59bddd92a7e20ac75f92697c9 *config.json
dde19847f562d394335223a4ae8bd32dc326e172e34b095ace2db37ba5ba839d *xmrig