PHP Malware Analysis

index.html, index.html.suspected.html, index.txt, test.php, zeki.htm, zeki.html

md5: 9c6a00fd3605e6e61ce756bab68de45e

Jump to:

Screenshot


Attributes


Deobfuscated PHP code

Shun Sama 

Codename : Zeki

Execution traces

data/traces/9c6a00fd3605e6e61ce756bab68de45e_trace-1676258551.4666.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 01:22:57.364439]
1	0	1	0.000149	393512
1	3	0	0.000191	393088	{main}	1		/var/www/html/uploads/test.php	0	0
1	3	1	0.000207	393088
			0.000233	314224
TRACE END   [2023-02-13 01:22:57.364554]


Generated HTML code

<html><head></head><body>Shun Sama 

Codename : Zeki</body></html>

Original PHP code

Shun Sama 

Codename : Zeki