PHP Malware Analysis

___000.php, ___000.php.txt

md5: ff2b74568d1307ea85f301da66e2714f

Jump to:

Screenshot


Attributes


Deobfuscated PHP code

<?php 
echo "test";

Execution traces

data/traces/ff2b74568d1307ea85f301da66e2714f_trace-1676255635.2743.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:34:21.172191]
1	0	1	0.000384	393536
1	3	0	0.000436	393208	{main}	1		/var/www/html/uploads/___000.php.txt	0	0
1	3	1	0.000459	393208
			0.000519	314248
TRACE END   [2023-02-13 00:34:21.172363]

data/traces/ff2b74568d1307ea85f301da66e2714f_trace-1676256779.069.xt
Version: 3.1.0beta2
File format: 4
TRACE START [2023-02-13 00:53:24.966839]
1	0	1	0.000144	393528
1	3	0	0.000185	393200	{main}	1		/var/www/html/uploads/___000.php	0	0
1	3	1	0.000202	393200
			0.000226	314240
TRACE END   [2023-02-13 00:53:24.966950]


Generated HTML code

<html><head></head><body>test</body></html>

Original PHP code

<?php
echo "test";

?>