Hostile 100% awesome-malware Download

wp-side.php

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP source contains very long line
SHA-2563936dd36c36bc9c3ba65d8927019b0549dfd937fdcdce2c4b6c5c6bb8548258a
MaleculeO₂(As₂C₂)Md₂(Pt)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.