PHP Malware Analysis

l10.php, l9.php

md5: 5067c7b42666fe6eb62ace3ba100e992

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<?php

echo "prikol";
echo "2";
echo "3";
exit;
Execution traces
data/traces/5067c7b42666fe6eb62ace3ba100e992_trace-1676240326.4844.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:19:12.382244]
1	0	1	0.000145	393512
1	3	0	0.000190	393896	{main}	1		/var/www/html/uploads/l10.php	0	0
			0.000225	315456
TRACE END   [2023-02-12 20:19:12.382356]


data/traces/5067c7b42666fe6eb62ace3ba100e992_trace-1676259376.3386.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:36:42.236381]
1	0	1	0.000137	393464
1	3	0	0.000181	393848	{main}	1		/var/www/html/uploads/l9.php	0	0
			0.000215	315432
TRACE END   [2023-02-13 01:36:42.236486]


Generated HTML code
<html><head></head><body>prikol23</body></html>
Original PHP code
<?php
echo ("prikol");
echo "2";
echo "3";
exit;
echo "4";
echo "5";
echo "6";
echo "7";
?>