Hostile 100% php 7 installs Download

taha20/license-client v1.0.1

Encrypted eval obfuscation

“مشتری سبک برای اعتبارسنجی لایسنس نرم‌افزار در پروژه‌های Laravel”

PHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy moduleEmits data with a PHP echo statement
SHA-256186648ed668890fa778c194193e4802255db15ffdaf48d3b2fd24d765c4cd09c
URLhttps://api.github.com/repos/khoshkhu95/license-client/zipball/4452cdab6e0f0c79e7a18b0af6a13e6672a7da4a
MaleculeO(As)H₅(Cm₂Cr₂DbOs₂Po)MdTh

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.