PHP Malware Analysis

wah.php4

md5: 5c94d7d224b62a77249b000e65077320

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<b>F-Automatical v7 [Sending test].<b><br><br><form method="post">
<input type="text" placeholder="email" name="email" value="">
<input type="text" placeholder="ID" name="orderid" value="">
<input type="submit" value="Send">
</form>
<br>                                                              
Execution traces
data/traces/5c94d7d224b62a77249b000e65077320_trace-1676260112.2087.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:48:58.106570]
1	0	1	0.000277	393512
1	3	0	0.000325	393416	{main}	1		/var/www/html/uploads/wah.php4	0	0
1	3	1	0.000345	393416
			0.000392	314224
TRACE END   [2023-02-13 01:48:58.106731]


Generated HTML code
<html><head></head><body><b>F-Automatical v7 [Sending test].<b><br><br><form method="post">
<input type="text" placeholder="email" name="email" value="">
<input type="text" placeholder="ID" name="orderid" value="">
<input type="submit" value="Send">
</form>
<br>                                                              </b></b></body></html>
Original PHP code
<b>F-Automatical v7 [Sending test].<b><br><br><form method="post">
<input type="text" placeholder="email" name="email" value="">
<input type="text" placeholder="ID" name="orderid" value="">
<input type="submit" value="Send">
</form>
<br>