Hostile 93% php 39,929 installs Download

bfunky/http-parser 2.2.4

Exfiltrates system data to hardcoded IP

“A library to parse HTTP headers and HTTP header fields”

Encoded URL has IP and .phpEncoded C2 URL with SSL bypass

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.