PHP Malware Analysis
r57shell.php
md5: f85c929841e2035ee4c1b236569dc2c4
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Emails
- billy@microsoft.com (Deobfuscated)
- hacker@mail.com (Deobfuscated)
Encoding
- base64_decode (Deobfuscated, Original, Traces)
- base64_encode (Deobfuscated)
Environment
- getcwd (Deobfuscated)
- php_uname (Deobfuscated)
- phpinfo (Deobfuscated)
- set_time_limit (Deobfuscated, Traces)
Execution
- eval (Deobfuscated, HTML, Original)
- exec (Deobfuscated)
- passthru (Deobfuscated)
- shell_exec (Deobfuscated)
- system (Deobfuscated)
Files
- copy (Deobfuscated)
Input
- _GET (Deobfuscated, Traces)
- _POST (Deobfuscated, Traces)
- HTTP_POST_FILES (Deobfuscated)
Title
- localhost (HTML)
- R57shell - Development by Navaro - Vn Force Group.\r\n\r\n\r\n