Hostile 100% awesome-malware Download

wp-last.php.suspected

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP source contains very long line
SHA-25652536e850879c5a4698e74a3d4192a8e59721fa7822de30b8d6d13b2489a5f10

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.