php-malware-analysis · Index

data.b64 May 8 php-malware-analysis

a8c259a1e58ac6334a5a78ab3194e27605195f9435e6c7f4b5b05fcf9450b9a7 H(F)Md

alter_macros.php May 8 php-malware-analysis

97ffb6f038865e7ffeefda0250c3e601701cf7d6e888d7e651238aa273782b20

retrieve.wso May 8 php-malware-analysis

6aaa62e33292fde11233efb58255da344fc0815f05573620b110277524adb2de O(Er)H(Cm)

dc1.php May 8 php-malware-analysis

df7e26695a5675f102b0fbe3f50c8141f903243b116a911074a428c16c191e3e H(Db)

Hacsugia.png May 8 php-malware-analysis

93d082e7a3132a97014b935a0192c593e1db217d2cf62d6ad069e7578d8060ec

e2.php May 8 php-malware-analysis

a3b3d1d90334cda0702c672818144cc173d81a8453710948f7ee8a8b5c09b617 H(Db)

getit May 8 php-malware-analysis

e740c289655b042f34a17883e3c545506a8e09c814c226e2f7976fee411621c9

103.43.46.26 May 8 php-malware-analysis

f7bb729d9d053456ea68e74821e493bb901502ca5f9b53ebab6e34afa79a8305

sibpanel_shells2.png May 8 php-malware-analysis

0200ea017c0742e095f3d497917da381f3864b0c8e0fef47062619822ebc9762

decipher_data May 8 php-malware-analysis

64c06c9ecec72f45d76f9c0c56efc08f0fce875dc7fc6202fe7b3edb708cfdbd H(F)

dc1.php May 8 php-malware-analysis

68d4a6f1cf7fdb287685140ec0255502eb600700bec216f84ef4b1c4980f11ab H(Po)

client.php May 8 php-malware-analysis

8d4dde1ef8bfad554a18bbc8f8f4974cc83a401ee0eee2ae5ed4aba087edf70c O₂(AsC₂)H₃(Cm₃Db₃F)

client.php May 8 php-malware-analysis

fdfa99f4cc13482689e404b5b5f8f3b26102e8ca76e8ee4a7852c3f4397fdd65 O₂(AsC₂)H₃(Cm₃Db₃F)

clean2.php May 8 php-malware-analysis

ff743901d403a9524d6a72e4062aa0b3b3dffb87503cdc2c9d07a16953759017 H(F₂)

create_data2 May 8 php-malware-analysis

274e420e38247c9f342a0d87e4bdd3a2991d039bd2acb0b0cf2a282ca501e480 O(Er)H(F)

timeparsefilter.go May 8 php-malware-analysis

b3ed66d42e3b32292394e1232f1ec53bf5f8cc4e914a4f5e2abeb0fcb66d5fa1

turkish_web_shell.png May 8 php-malware-analysis

2534862afd43300cffaf84398758ca8fc3f72a044664212df4c4af5d69c52dd5

timeparsefilter.go May 8 php-malware-analysis

546de1f15bcc01ead3372862ce69ff0bef4df5e39a91c12712dd694a1d9f2f86 H(Cm)

create_dropper May 8 php-malware-analysis

a80a0a6f426134661695cd74226280e3e7d815f8a3f771fca55935938d2e6550 O(Er)H(F)

97.74.215.142VgGQ0QoAAAMAAFJ1N2YAAAAB.0.file May 8 php-malware-analysis

1435d89da9cc63d3b77cb3e36a9878284b1b175bbc99c576494c0a7a78c8d227

b1.php May 8 php-malware-analysis

2a273fe693b3c6c3430862cf8a9b132814d01dbfd65d4b60f4aa6b8dd6afede6 O(C)H₃(Db₂FPo)

54% webshell/decoder

create_data May 8 php-malware-analysis

f8b40d05e646a3b733958f90db0638993bc4ba5982af48e9c9a3c387af757445

order May 8 php-malware-analysis

04a0417eb324e000b0d71ea0813b34a5d3326099af892003d24ab0ca1a96b032

commands May 8 php-malware-analysis

3200d39ff77d7e157250ebdf33f8d39fc007c431a40d4ba51265f8f177efdc86

decode_extra May 8 php-malware-analysis

cee3b713291fe9322743a8b29f25fc2c945eee7d068b7988ae64a33476b5e259

get_files May 8 php-malware-analysis

4e5e348c2ee877eb011712a5ca749b52f4ecb2f9ea1dc6edb87bc45d992858e1

ip_download_access May 8 php-malware-analysis

ff3b58dd7d5f806573069c6662c5ebe564aa843c6889de2043ced8adf5f28c35

create_payloads May 8 php-malware-analysis

20042ff8e5fc016568828602ee1b7f21432dc3d3f7331816fa3958418044e943

create_pl3_2 May 8 php-malware-analysis

54ccce37e6d774d7657dfce34311c5d0130a91b91989909b5f5837d5afd6df46

create_pl3 May 8 php-malware-analysis

ad6455268a32e05c7bcd0d023eac2b2a27375314fc2f7880ce7b105cb43d5e4b

create_pl5 May 8 php-malware-analysis

c25d21016227b16822d60201e72a4eaa5bddb8c5bb13b93503c35459a0495e92

create_pl2 May 8 php-malware-analysis

d7fb79da3ced0f5a7e71bf65646ce135be24115eb9a70f7e362a9f5921586258

dc2.php May 8 php-malware-analysis

3e55c889ae27da49a75c54622a4cfb54fbe25b0622092f6acd1477a7aba1b381 O₂(As₂C)H(Db)

54% string/recoverystring/reconstruct

ConnectionManagerLabeled.php May 8 php-malware-analysis

0f7b10e6e6e031bbc1d305c2b13d79d39b79839a3dd1482b581da423be392ad3

e3.php May 8 php-malware-analysis

5736063dc8fd872d0f9939e0eb64b776a7300813c8e9d9ac07ed0eb4a8159f2b

f1.php May 8 php-malware-analysis

cf2e5a1a6979857f17dc4ad37193143ed877aefb179d1db9cfcba1d44b9cee33 H₂(CmOs)

links_revealed.png May 8 php-malware-analysis

f4f73e04e991028a4de01c4e8b3e358ec3d09408aaff170fc4752e1c9d0ac388

create_pl May 8 php-malware-analysis

958a18e821e8e939ef0fbdc5230e969f08ade544ba37214417f8a970a5d13e15 O(Er)H(F)

composer.json May 8 php-malware-analysis

92d04787cb6a2ebd251fd188d7172860ea25bf38533000d2f62ec7ed03aeab6f

def_graphs May 8 php-malware-analysis

12f1d9c98c71f7453027bbdc9afb71edbcf8b46096ac29ccfe7000a71b224c4c

headers May 8 php-malware-analysis

7cb24b96b90557d5e57f1c7de21f5e27dc101bf20ed0ef3e4e2401dc6b48f1bd

extract_ips May 8 php-malware-analysis

367624ff5f571cb0f95eaad100d8c3e375f3b390c847410063f18834084ccf84

translated.png May 8 php-malware-analysis

c19130c8f289c3e176e42da9c1efc019e7489d00c8415d2c5af970b716f1b498

encrypt.php May 8 php-malware-analysis

16dc3a4e2456b50ae419730338c73053c23b430865c0a687c819340e281cba8d O(C)H₂(Cr₂Db₄)

39% Simple XOR encryption script

bobtxt.png May 8 php-malware-analysis

248aee824d64eb926dfb50fd61cd8eaffb1106399546fb400b709383c4e37341

keyguess2 May 8 php-malware-analysis

660faac079454c0e7ed94149bf43c73d248a9bca3c2c6c381f9f2a50323cfbb7 O₂(AsEr)H₂(F₂Po)

find_bearers May 8 php-malware-analysis

70906ebf516e0cd5ccd1c7b138570e69b820828d683e7b40d8971c689bfd2dae H(F)

plugintxt.png May 8 php-malware-analysis

7446d9a24d941fed52161851ff41a24decc0a0900cb84e1ec794204da64a3156

create_flist May 8 php-malware-analysis

e07db1e3ec615b6c05b7e8ba924bea58a70ae08041ca222c4da480511c53c8a3 H(F)

keyguess May 8 php-malware-analysis

fcf3fa0d56df2b7abb892a5bd81de2676be3d3ed110cfc1a7de4d8b13dd4eef6 O₂(AsEr)H₂(F₂Po)

timeparsefilter.go May 8 php-malware-analysis

1d031f259e7219910b12b8f1877d377108e157149220525bbdb46ca1aee415f9

possibles May 8 php-malware-analysis

2324b05a822252f8a2b620a99e5f898cc3142cd4c0739986fa8e86c03fbe889b

ubh_web_console.png May 8 php-malware-analysis

423de5faecec10a6fc3b90243d249cc8a1d7a07d56bf8039f5d38b836ec1d9b6

izocin_screenshot.png May 8 php-malware-analysis

eaab916f1b2b6a90ad7a1fd6aa641c06fc0ddde43c3f37344f15610c06e3db8d

find_uniqs May 8 php-malware-analysis

f7d287b28d06ed765e90f1858b83d8d5104212be0f0f1065052baf99c9146a91 O(Er)

wso.passwords.txt May 8 php-malware-analysis

cc2135822c23a70f8a3faa665fe1c70d3016da08bb64a781f84ed338f067a7e7 Md

timeparsefilter.go May 8 php-malware-analysis

09c30d1f497d322cacd4f7b3af0c1f7993ea9590f99472838e774131ab5ecc21

wget_style May 8 php-malware-analysis

1cd722923f09263492fcf7b6e7523396b129b4be240b640ba461e638fc1cb9e6 H(Cm)

get_accesses May 8 php-malware-analysis

b9b7a3f17a85e173a18311f0168f8d6b750afb73da839a7fc5b42dac6711b64c

find_shell_count May 8 php-malware-analysis

4c97bc08da64f77da6f0e81e1cdbc07f8d4bb55196c1689f34fc0b9f09464ca3 H(Po)

create_pl2_2 May 8 php-malware-analysis

120f3780d2cf1b3e279bb60c51b7bec28805d3b1042b2375e02a83a4785d632f O(Er)H₂(FPo)

extract4 May 8 php-malware-analysis

7a812dbeef31177828d54267ad0d1a834139dc38b809a82b673ee1c87f77d5a8 H(Db)

dc2.php May 8 php-malware-analysis

07f20c09a3b101ef7523ea996e2eb3f3e28d022dc8e966e497a3fb3efc22e302 H₂(DbPo)

ConnectionManagerRandomTest.php May 8 php-malware-analysis

142a9f22f54ef242dc4852c517f74bb25db069f06e48e64d7939859f9a47db0f Md(Pa₂)

sitemap_gen.php May 8 php-malware-analysis

23ceff15b9d70b642a6d6510aae0269b8241d307ef5a74b77f4c669faf6b702e H(Cm)

RecordNotFoundException.php May 8 php-malware-analysis

54ffea75d5b65554c4fa2dff886a719841efdb16fc432417f84f7a16fd1883c6 K(Am)

contents May 8 php-malware-analysis

8fb9a1c146ab5b34c24501f4112440d0b4676a3f4de0f34bf968786bae90155a

deobf May 8 php-malware-analysis

fc1506f82f407a66f777a733001c24964083e41b36800d21ebcb40d8443e7c47 H(Cm)

18.222.103.133Wq1z-x2iJJ9Dd7fGpaoj4gAAAAI.0.file May 8 php-malware-analysis

01dc3381a71aab126cbf41bd51055eebdb8a4ac6b16b81eb8530e63c49abb3f3 O₂(As₃C)H₂(OsPo)

control-flow/ast

encoded_payloads May 8 php-malware-analysis

1c1e1cac8e1253848d2de0909e6f6ce0808ca52d7fa9d8648ec9f1987ff0fa14

blacktools_io.png May 8 php-malware-analysis

2c44a9cd481e52ff7566444062fed17cb490215afa21debadececbcea2b84faf

chinese_webshell.png May 8 php-malware-analysis

303dd7c18130823e48e858d3cd441a59f02f0458ad1a4cb685e8945872c2c3b2

82.223.18.202 May 8 php-malware-analysis

6a1584a04ff8582b5bb24d9b28164ffea5a98f03fa8bccb329bf5b1f35cbd9c2

160.153.153.30 May 8 php-malware-analysis

6c279c263a43d22253fa92c6de908e35fce19d5afd61f64ecb99224ab52139ca

198.57.247.159 May 8 php-malware-analysis

76d0645046f96631ade8ca68b50a7b5e7ea0e3355eb0bb2fc3391898f6cb2986

pacman.jpg May 8 php-malware-analysis

7f9c8b6bac909509b58427261e7b103708b2a0c0658f6b5fc3e0fa65d5ce9c06 H(Db)Md

payload/media

YiunIUY76bBhuhNYIO8.php May 8 php-malware-analysis

843f12d1bd037ae52481047d1511cb7244fd6507b100b2edd3435a555cdb894f

orb_avatar.jpg May 8 php-malware-analysis

8688fb8628942e3acd60dffbeec9074da5a3002a1e9f8a5c2cbaf94d3eaba4c6

GetDomains.php May 8 php-malware-analysis

c0aa00a4f246e8ba723e1323627c97ea1d8aade082ba90324ab934af8b2d955d H₂(FOs)

mail_recon.png May 8 php-malware-analysis

8195efd02d8d90436e499ffd4b55b19443a6ec669b0f7cab3d9553c8db6b1805

puzzling.dat May 8 php-malware-analysis

6029a99da02a532f9fc30c538134db0326a4b21d4f7144eef313468696673f2f O(As)

timeparsefilter.go May 8 php-malware-analysis

dbe2757474013036b49c07f3d0d15ee2d47d826732abd8281749399b9378c085

BDRPDATALIN May 8 php-malware-analysis

541c6b5095c54b0700959069ce8015e047cf1771a8cc798ab89c3ec7e0749cd4

timeparsefilter.go May 8 php-malware-analysis

f8614b59a83610878869543c4511144a124a4fc3c266157b58662f0974bc28b9

timeparsefilter.go May 8 php-malware-analysis

3cb424e3ff2ab3e9446911072cd79d948fa058e27d604ff677389ecf0608a2b0

[email protected] May 8 php-malware-analysis

cb8d7a4002e72328b380e103b8cb20325653d2af8cb8f10a03f45f4d98e54e09 O₂(C₂Xe)H₃(CmF₄Os₂)

pack.php May 8 php-malware-analysis

e001919d1914f8ea6297ce27e16736ec937829a85f7b4eb447b0f882ebcc9971

find_log_entries May 8 php-malware-analysis

cd81acbc9d5d7f76273a1cba0e78baef85d5d4f6cd50fb71783d19178e290a48

send1.php May 8 php-malware-analysis

092d87b8dff8893b6d0b6827d32908fea0cb896ac2dab8bffa08d0d6c9305b05

command.php May 8 php-malware-analysis

3c65f84c2f8b5c66bc7aa0a25929b0fe185fdb0b7cff539f9d077edea5f51baf H(Cm)

mass_deobfuscation May 8 php-malware-analysis

24a3c1b30d7f75b6460c55c0ecdd128dcb93467ec2f32aacac1df32c9dc6149a H(Db)

timeparsefilter.go May 8 php-malware-analysis

326d25bbc9a614e7f6c49b2cd814c93a036a9fbc8048577217b39491002a861b

dc2.pl May 8 php-malware-analysis

9acffe4ab06661d7f4c9b39987b6ad30246988df92715c30f2ee116d71e2e359

dc1.php May 8 php-malware-analysis

260b790de9109e009d359c5ae9fb0a3101a5cce42417d6defc4e2659ba2106af H₂(F₂Os)

python.izo May 8 php-malware-analysis

083e3d57ba4bf507b585865876c7eb353462e8fd7d73836bc85d1a192affa4a7 H(Po)