Hostile 100% awesome-malware Download

read.php.suspected

PHP webshell using $a($code) for kind of eval with encoded blob to decode, e.g. b374kPHP webshell using some kind of eval with encoded blob to decode, which is checked with YARAs math.entropy module
SHA-256ed013e3fb4197d39faf4353e263a995104ee95e924e952bd94dceb5f9bfda535

Evidence

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.