PHP Malware Analysis

%22><img src=x onerror=alert(1)%22>.jpg, %2fetc%2fpasswd, %31%3C%53%63%52%69%50%74%20%3E%72%45%59%6A%289229%29%3C%2F%73%43%72%69%70%54%3E, %c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c0%ae%c0%ae%c0%af%c, ^(#$!@#$)(()))******, <%={{={@{#{${acx}}%>, 081226077336.test%22.png, 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%72%45%59%6A%28%39%34%37%31%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%, 1<svg �, 1some_inexistent_file_with_long_name%00.jpg, acu7012%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9uca7012, acux4496%C0%BEz1%C0%BCz2a%90bcxuca4496, ALFA%20TEaM%20Shell.php, anubiskun.php?a=.xlsx, c99.txt?, C99madShell%20v.%202.0%20madnet%20edition.php, file#, fit.txt%3F.jpg, log.php?, mini.php3?, nz^xyu||a #|, passwd%00, passwd%00.jpg, payload.php%00.jpg, some_inexistent_file_with_long_name%3F.jpg, win.ini%00.jpg, zup.phP<?.jpg

md5: 91e38f54dc7aa44e2fc28ea427210cf5

Jump to:

Screenshot


Attributes

Emails

Title

URLs
  • http://www.w3.org/1999/xhtml (Original)
  • http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd (Original)


Deobfuscated PHP code

Failed to deobfuscate code

Execution traces


Generated HTML code

<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL was not found on this server.</p>
<hr>
<address>Apache/2.4.52 (Ubuntu) Server at localhost Port 80</address>

</body></html>

Original PHP code

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head>
<title>Object not found!</title>
<link rev="made" href="mailto:you@example.com" />
<style type="text/css"><!--/*--><![CDATA[/*><!--*/ 
    body { color: #000000; background-color: #FFFFFF; }
    a:link { color: #0000CC; }
    p, address {margin-left: 3em;}
    span {font-size: smaller;}
/*]]>*/--></style>
</head>

<body>
<h1>Object not found!</h1>
<p>


    The requested URL was not found on this server.

  

    If you entered the URL manually please check your
    spelling and try again.

  

</p>
<p>
If you think this is a server error, please contact
the <a href="mailto:you@example.com">webmaster</a>.

</p>

<h2>Error 404</h2>
<address>
  <a href="/">10.0.2.2</a><br />
  <span>Apache/2.4.53 (Unix) OpenSSL/1.1.1o PHP/8.1.6 mod_perl/2.0.12 Perl/v5.34.1</span>
</address>
</body>
</html>