PHP Malware Analysis
shell3.php
md5: 8fae882d808f42ee2b35a591946b17e4
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Execution
- shell_exec (Deobfuscated, HTML, Original)
Deobfuscated PHP code
<script language="php">
shell_exec('id');
</script>
Execution traces
data/traces/8fae882d808f42ee2b35a591946b17e4_trace-1676250293.6243.xtVersion: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 23:05:19.522114]
1 0 1 0.000142 393528
1 3 0 0.000182 393136 {main} 1 /var/www/html/uploads/shell3.php 0 0
1 3 1 0.000199 393136
0.000224 314240
TRACE END [2023-02-12 23:05:19.522226]
Generated HTML code
<html><head><script language="php">
shell_exec('id');
</script>
</head><body></body></html>Original PHP code
<script language="php">
shell_exec('id');
</script>