PHP Malware Analysis

0x.php

md5: c6a8d886f8c25de693cfd03f4058408a

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<?php

fwrite(fopen('0x.txt', 'w'), 'dlwlrma');
Execution traces
data/traces/c6a8d886f8c25de693cfd03f4058408a_trace-1676247264.3548.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 22:14:50.252580]
1	0	1	0.000143	393464
1	3	0	0.000188	393568	{main}	1		/var/www/html/uploads/0x.php	0	0
2	4	0	0.000204	393568	fopen	0		/var/www/html/uploads/0x.php	2	2	'0x.txt'	'w'
2	4	1	0.000240	394200
2	4	R			resource(4) of type (stream)
2	5	0	0.000257	394128	fwrite	0		/var/www/html/uploads/0x.php	2	2	resource(4) of type (stream)	'dlwlrma'
2	5	1	0.000279	394192
2	5	R			7
1	3	1	0.000294	393680
			0.000318	314200
TRACE END   [2023-02-12 22:14:50.252781]


Generated HTML code
<html><head></head><body></body></html>
Original PHP code
<?php
fwrite(fopen('0x.txt','w'),'dlwlrma');
?>