PHP Malware Analysis

Svgiframe.svg

md5: 790abb912f5f4cdd1a3f6dfc661076d0

Jump to:

Screenshot


Attributes

URLs


Deobfuscated PHP code

<svg width="6000" height="6000">
  <g>
    <foreignObject width="6000" height="6000">
      <body xmlns="http://www.w3.org/1999/xhtml">
        <iframe src="http://7aib63p0m19f1x2g3tm85l7p3g97xw.burpcollaborator.net"></iframe>
      </body>
    </foreignObject>
  </g>
</svg>

Execution traces


Generated HTML code

<svg width="6000" height="6000">
  <g>
    <foreignObject width="6000" height="6000">
      <body xmlns="http://www.w3.org/1999/xhtml">
        <iframe src="http://7aib63p0m19f1x2g3tm85l7p3g97xw.burpcollaborator.net"></iframe>
      </body>
    </foreignObject>
  </g>
</svg>

Original PHP code

<svg width="6000" height="6000">
  <g>
    <foreignObject width="6000" height="6000">
      <body xmlns="http://www.w3.org/1999/xhtml">
        <iframe src="http://7aib63p0m19f1x2g3tm85l7p3g97xw.burpcollaborator.net"></iframe>
      </body>
    </foreignObject>
  </g>
</svg>