PHP Malware Analysis

test.php, test1.php

md5: e6eb1d4cc8308cd73abe430669425242

Jump to:

Screenshot


Attributes


Deobfuscated PHP code

<?php

$name = "test";
echo $test;

Execution traces

data/traces/e6eb1d4cc8308cd73abe430669425242_trace-1676239252.6047.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:01:18.502483]
1	0	1	0.000136	393512
1	3	0	0.000178	393208	{main}	1		/var/www/html/uploads/test.php	0	0
1		A						/var/www/html/uploads/test.php	2	$name = 'test'
1	3	1	0.000224	393208
			0.000248	314288
TRACE END   [2023-02-12 20:01:18.502623]

data/traces/e6eb1d4cc8308cd73abe430669425242_trace-1676242764.1439.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 20:59:50.041759]
1	0	1	0.000183	393512
1	3	0	0.000229	393208	{main}	1		/var/www/html/uploads/test1.php	0	0
1		A						/var/www/html/uploads/test1.php	2	$name = 'test'
1	3	1	0.000279	393208
			0.000307	314288
TRACE END   [2023-02-12 20:59:50.041919]


Generated HTML code

<html><head></head><body></body></html>

Original PHP code

<?php
$name="test";
echo $test;