Hostile 100% awesome-malware Download

mod_x.php.suspected

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP source contains very long line
SHA-2564376e9d006bd393788cea38cbd0cb84a9350359e03b613d7acd609f6ee0b15db

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.