PHP Malware Analysis

newtest.php

md5: 61179c596626e3167d0b6c2789e87c43

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<?php

echo "hello";
//echo fread(popen("mv index.php ../../../../../", "r"), 4096);
Execution traces
data/traces/61179c596626e3167d0b6c2789e87c43_trace-1676242989.3879.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:03:35.285722]
1	0	1	0.000143	393528
1	3	0	0.000185	393088	{main}	1		/var/www/html/uploads/newtest.php	0	0
1	3	1	0.000201	393088
			0.000226	314240
TRACE END   [2023-02-12 21:03:35.285835]


Generated HTML code
<html><head></head><body>hello</body></html>
Original PHP code
<?php 






echo "hello";
//echo fread(popen("mv index.php ../../../../../", "r"), 4096);










?>