Hostile 100% php-malware-analysis Download

web.zip

PHP endpoint on suspicious domainPHP scandir function symbol
SHA-256e94426cad0790e5ea3aa333d73f31838eea0d501675975d9382773add1735f95

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.