PHP Malware Analysis

rrr.php

md5: e2ad3b00d99f1c4e92e42d2ce9706bc3

Jump to:

Screenshot


Attributes

Files


Deobfuscated PHP code

<?php

file_put_contents("olll.txt", "ooooo");

Execution traces

data/traces/e2ad3b00d99f1c4e92e42d2ce9706bc3_trace-1676261205.2242.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 02:07:11.122001]
1	0	1	0.000192	393512
1	3	0	0.000238	393344	{main}	1		/var/www/html/uploads/rrr.php	0	0
2	4	0	0.000254	393344	file_put_contents	0		/var/www/html/uploads/rrr.php	2	2	'olll.txt'	'ooooo'
2	4	1	0.000298	393528
2	4	R			5
1	3	1	0.000314	393456
			0.000336	314224
TRACE END   [2023-02-13 02:07:11.122223]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php
file_put_contents("olll.txt", "ooooo");
?>