Hostile 100% php-malware-analysis Download

dc5.php

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy module
SHA-256728083e7ccf250dd438078d7e720b32b1656da908423624979b58e2d646d7349

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.