PHP Malware Analysis

l.php, l1.php

md5: 876c1cc1f59b2bcf342d2be0927cca0e

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
Failed to deobfuscate code
Execution traces
data/traces/876c1cc1f59b2bcf342d2be0927cca0e_trace-1676246057.401.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:54:43.298786]
1	0	1	0.000156	393464
1	3	0	0.000199	393152	{main}	1		/var/www/html/uploads/l1.php	0	0
1	3	1	0.000216	393152
			0.000242	314200
TRACE END   [2023-02-12 21:54:43.298904]


data/traces/876c1cc1f59b2bcf342d2be0927cca0e_trace-1676262019.5766.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 02:20:45.474389]
1	0	1	0.000191	393464
1	3	0	0.000237	393152	{main}	1		/var/www/html/uploads/l.php	0	0
1	3	1	0.000254	393152
			0.000285	314200
TRACE END   [2023-02-13 02:20:45.474520]


Generated HTML code
<html><head></head><body>1 ,2 , 3 ,4 ,5 ,6:::: <!--?ploool--></body></html>
Original PHP code
1 ,2 , 3 ,4 ,5 ,6:::: <?p<?php

echo "loool";