Hostile 100% awesome-malware Download

s.php

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy module
SHA-2568277cf19f7e893ad375abed1ee6fed7c419fe4c57f9d2988e1f8fdc9a8689170

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.