PHP Malware Analysis

cmd.php

md5: 89515a0dbd56db2368d5069554eaf28d

Jump to:

Screenshot


Attributes

Execution


Deobfuscated PHP code

<html><head></head><body><br>
<b>Notice</b>:  Undefined index: cmd in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br>
<br>
<b>Warning</b>:  system(): Cannot execute a blank command in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br><br>
	<form action='cmd.php' method='GET'>
	<input type='text' name='cmd'>
	<input type='submit'>
	</form>
</body></html>

Execution traces

data/traces/89515a0dbd56db2368d5069554eaf28d_trace-1676243110.9802.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:05:36.878045]
1	0	1	0.000138	393512
1	3	0	0.000178	393480	{main}	1		/var/www/html/uploads/cmd.php	0	0
1	3	1	0.000194	393480
			0.000219	314224
TRACE END   [2023-02-12 21:05:36.878153]


Generated HTML code

<html><head></head><body><br>
<b>Notice</b>:  Undefined index: cmd in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br>
<br>
<b>Warning</b>:  system(): Cannot execute a blank command in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br><br>
	<form action="cmd.php" method="GET">
	<input type="text" name="cmd">
	<input type="submit">
	</form>

</body></html>

Original PHP code

<html><head></head><body><br>
<b>Notice</b>:  Undefined index: cmd in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br>
<br>
<b>Warning</b>:  system(): Cannot execute a blank command in <b>/var/www/uploads/cmd.php</b> on line <b>2</b><br><br>
	<form action='cmd.php' method='GET'>
	<input type='text' name='cmd'>
	<input type='submit'>
	</form>
</body></html>