Hostile 100% awesome-malware Download

wp-clears.php.suspected

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP source contains very long line
SHA-256dcb9f6db38cd506be32acdbae303f6699379809b435551f0ad4794158a399b9e
MaleculeO₂(As₂C₂)Md₂(Pt)Th

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.