Hostile 100% php-malware-analysis Download

a3.php

PHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy moduleALFA create_function fragment
SHA-256cd58933a92e13eee4f857aa82f23f94f22873498a07839d1eed40f64c8e59916

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.