php-malware-analysis · Index

m1.php May 8 php-malware-analysis

17b5abece964ba82b77c33900c33370f5dbe125a7de897f2d11e649b63804a05 KO₅(C₅DyAsCaS₂)H₅(Cm₄Po₃Db₂FOs)Md₃(Pa)

dc7.php May 8 php-malware-analysis

18b45adba48468d4003e4db1c822f121bb4dd52fcd9dfb4605f2ab9919578a3f K₂O₁₂(C₁₇As₃Ca₄Dy₃Er₂AlEuS₅Xe₆CoILa₂)H₇(Db₁₁Po₈Cm₈CrF₈Os₄U)Md₄(PaPt)Th₂

2ww.f2.php May 8 php-malware-analysis

1a3daf39b42ccfee4c04f1f140361092bcde13e45db8de796400e8451c4cd975 O₂(AsC₂)H₂(PoF)MdTh

wget_style May 8 php-malware-analysis

1cd722923f09263492fcf7b6e7523396b129b4be240b640ba461e638fc1cb9e6 H(Cm)

PromisorInterface.php May 8 php-malware-analysis

164c0956efb7d2edddedbf8bf35782f6801a502090aa488968fd16e9429fb82c

dc2.php May 8 php-malware-analysis

c00441e71cc567a87ccc680b1a19b94b0e6e9911aaa0b9e0131b7d3de752b076 KO₄(C₄AsXeEu)H₃(F₃OsDb)Md₂Th

piA.php May 8 php-malware-analysis

c06b1d751090b81c89100c0e0b0f72574a3818adfa48f5ab481778d3fa2d37ab O₃(As₃XeC₂)H(Db)Md

f3.php May 8 php-malware-analysis

1ced6cde6fcab393301d6daf9e896e33044bd07b4bc9b38fa177673ccb762c28 O₂(As₂C₂)H₄(CrFOsPo)Md₂(Pt)

18.222.103.133WqvXLekLitkX3G-vql5EDAAAAAQ.0.file May 8 php-malware-analysis

1f4002b1f0d07548e1eea5e7726841c5ecc002959c1437d1090feaba04c2ba01 O₄(I₃AsDyEr)H₆(Cm₅Cr₂DbF₃Os₃Po)Md₃(Bi₂He)Th

100% Contains cryptominer binary

phpunit.xml.dist May 8 php-malware-analysis

2177091d91962b0d823e3118f924ab802697c915f56dfd4683818f4b3ac8a009 H(Db)

x3.php May 8 php-malware-analysis

228eb3a92aec13035c5c9878b58a56b25da4a4eba80466b21fb178be05108504 O(C)H(F)Md(Pt)

uc4.php May 8 php-malware-analysis

22ae892375eaac28335bc73dbf2a8abc84e6c4eb0075a4777df850d4584f8a86 O₄(C₅CaDyI)H₅(Cm₃Db₃F₂OsPo)MdTh

f1.php May 8 php-malware-analysis

23f0e4e6c058e09dc4509bc34a9de4da5dd7652b25b72ae49678c2ec65d52f6e O₂(AsC₃)Md

223e1910ed9dcd610c50bdfea19900fc_php.txt May 8 php-malware-analysis

24e31b86c0823bc93e8e009d6f27410b0fac9a4e7c1df47f6071355532fd802d O₂(CAs)

77.72.82.12W4hkBJ5vbfQkH4AYV93EkQAAAAEfile May 8 php-malware-analysis

27d8e5129666e66f17f1108b9fe3892d8b9adcdaac28cf64f780713fae0b149d O(As₂)H₃(Db₂OsPo₂)MdTh

100% Obfuscated PHP, variable function calls

session.tgz May 8 php-malware-analysis

28c67788cee1465da5fd2033358219011e620920da6d884cf9ae7667bd55a977 O₄(C₇As₅ErI)H₆(Db₄Cm₁₅F₉Os₂Po₅U)Md₂Th

99% PHP webshell with command execution

dc1.php May 8 php-malware-analysis

2b08f5826d5abf095239763aad755eee29dd93ddd479573e53accc3fd4ad16dd O₂(As₂C₂)H(Po)Md₂(Pt)Th

ConnectionManagerSwappable.php May 8 php-malware-analysis

2d6aa7372e4522757c65c6e9a1bca64eb9e78dc501a53b5704431960853c3cbc O(C)

chinese_webshell.png May 8 php-malware-analysis

303dd7c18130823e48e858d3cd441a59f02f0458ad1a4cb685e8945872c2c3b2

dc4.php May 8 php-malware-analysis

30f30f310bf4c3b88dab1821391832a6d13bcb2999f4c21e7b2bd96edebf4533 O₂(As₂C₃)Md

CommandInterface.php May 8 php-malware-analysis

31430ce1e0621e47db5ccb83538ab08795d7c543dacda69f7fa982b37f668a98 O(C)Md

43753868587ea5046afed49e65cfd22d.zip May 8 php-malware-analysis

cb78785331eb96dd177b2a9b3f083fcca78b4a34812055d35968468769919b21 O₁₀(As₃C₁₅CaEr₃P₃XeDy₂CoLa₃S)H₆(Cm₅Po₄CrDb₇F₃Os₂)Md

per.js May 8 php-malware-analysis

32c7fc0f4f7399d9e6bba4962df15525c2e48cbae75364c42cf046bb1d8c8a2c O₄(C₂CaErS₃)H₂(UCm)Md₂(Pa)

dc6.php May 8 php-malware-analysis

3523509b84ac23c1054a50e4aa36edd4e283951af38abb95dadcc1dd7485262d O₂(AsC₃)Md

b6.php May 8 php-malware-analysis

3525dc0afaf95486273530791e40d5713623e5dc1828c35e6caf6d0d8fa41ac3 O₂(As₂C)MdTh

a3.php May 8 php-malware-analysis

cd58933a92e13eee4f857aa82f23f94f22873498a07839d1eed40f64c8e59916 KO₃(As₂CLa)H(Db₂)MdTh₂

dc4.php May 8 php-malware-analysis

377471db2aef0a45e319e307b30e952f884f8e9950ff632bb356d470f4bda611 KO₂(As₃C₂)Md₂(Pt)

iB.php May 8 php-malware-analysis

cd804b5229644eefb1233e9d4686101e93d611b0e12ec35f0152db85196f8f48 O₃(As₂C₃Eu)H(Os)Md₂Th

i1.php May 8 php-malware-analysis

ce0684795db172bebe89d5179cfed457e2eeb25c8c9c2ead860c2513dbd6374a KO₃(As₂C₂Eu)Md₃(Pt)Th

index.php May 8 php-malware-analysis

cfc0527572500996e11c66e4ef997c1212b1333c914cf1bee0e8aa7428750393 H(Os)Md₂(Pt)

CompositeStream.php May 8 php-malware-analysis

37fbe22f590c365e20f0af15e86c7ad9794c561fff3c84d642c8d6b8af1d9b8f O(C)Md

ConnectionManagerRepeatTest.php May 8 php-malware-analysis

39dbde56248c6b7925599ef23ba19ef73ce66986ef3f8aa90819e1a3e3955e64

webr00tcgishell.png May 8 php-malware-analysis

d284f0c1e1a0f395b705848b852d36d881e79df24e4f0148ccf46bee68e8095d O(As)

piB.php.2 May 8 php-malware-analysis

d2aeaa52c975326e1e280579ef28cab17571bd2f812398095b73867220559e07 O₄(C₃AsXeEu)H₃(F₃OsDb)Md₃(Pt)Th

f2.php May 8 php-malware-analysis

d3a20dc344c3c5dea25c7e1ad24472278059b85606e248bed4a1c40b9b120cb9 O₃(C₃As₂Xe)H(F₃)Md₂Th

wlyphget.php May 8 php-malware-analysis

d4b321eb85a44bf4763633ca64425eb4d6c1125d88c5e847a40ef6e5f37ae162 H(Cm)

themes.php May 8 php-malware-analysis

3b1f10ae71f97177627dd33b58e51a63127bfd75a94c83da73c8541bc58bbcfe O₆(AsC₆PAlCaLa)H₃(Cm₂Db₅Os)Md

emb.txt May 8 php-malware-analysis

dbfd34737f9b75dc9b1afb032568d3f08ba86fe1d36437324db42862e7b6d5a0 O(As)Md₂(Pt)

iC.4.php May 8 php-malware-analysis

e0d0c1869adb1e0e01acfc146f4c666b34f8e74ba90ec45ead15657c824df92e O₄(C₇AlDyI)H₅(CmCrDb₂F₃Os)Md

iB.4.php May 8 php-malware-analysis

e4b23450c569be970f82dc41b28f6ebee50b7defbdfbf4678103af74338cb09f O₄(C₇AlDyI)H₅(CmCrDb₂F₃Os)Md

iC.php May 8 php-malware-analysis

e4d716ef38bd704e8e123ffdc13204f06e5779fda2e8e11245757645f4cfe2a6 O₃(As₂C₃Eu)H(Os)Md₂Th

screenshot.png May 8 php-malware-analysis

ea1d2245f6fe2c6f5bb7c845cf926eea952144ac03c2be47491835837005107a

107.150.127.57XHbElNIdmEq2ye 8iqYkbwAAAAE.0 May 8 php-malware-analysis

ebc2554e2c2518918ca7d841d7644d6520058cca16b0fef87e7e0d75673d0a04 KO₂(C₇As₅)H₆(Po₂Cm₂CrDb₃F₃Os)Md₂(Pt)

index.php May 8 php-malware-analysis

ed2011a38727ef4ce4d2706ddade51dd14181a2936fedb34a65d38d68c294f48 KO₅(C₆As₂ErDyLa₃)H₃(CmDb₆Os)MdTh

pp.dc5.php May 8 php-malware-analysis

f7197c381ffcfdde9fe5ee1950bd04094f312a7b573ed541f7401a4d1d40c9a1 O₅(C₇XeAlDyI)H₆(PoCmCrDb₂F₃Os)Md₂(Pt)

spork.b64 May 8 php-malware-analysis

f7c5ff5fdae723761becbf58096dc17071b13f3aba32baa80a7fe3fb890a809f

f1.php May 8 php-malware-analysis

fb141fbff830d10c4736c4d9035ced6f967fbc0357c0da7c33e27b010cbb48fd KO₄(C₃AsXeEu)H₃(F₃OsDb)Md₃(Pt)Th

composer.json May 8 php-malware-analysis

01279c21103d47415b78d0b6863dfc815b50cc2a66b546a62306686b8f7c40eb

18.222.103.133Wq1z-x2iJJ9Dd7fGpaoj4gAAAAI.0.file May 8 php-malware-analysis

01dc3381a71aab126cbf41bd51055eebdb8a4ac6b16b81eb8530e63c49abb3f3 O₂(As₃C)H₂(OsPo)

control-flow/ast

xback_pl May 8 php-malware-analysis

033df7416594504689111d8fdeb5d61aea52102978ce58b65e3ba97862a7fcd4 O(C)H₃(Cm₂FPo)

shell_data May 8 php-malware-analysis

03e3242e7f1ed9240eea63d116e6258ea275ec980e82a3ef9b3f2d2bbcec140a O₃(AsCEu)Md₃(Pt)

a5.php May 8 php-malware-analysis

03fbad0f70175e15d61696487f2d41879c813cb6d39479c77e981073cf0ceda0 O₂(As₂C)Md₂(Pt)Th

timeparsefilter.go May 8 php-malware-analysis

09c30d1f497d322cacd4f7b3af0c1f7993ea9590f99472838e774131ab5ecc21

HeaderBag.php May 8 php-malware-analysis

0a20588942a87949334b0cb934e4c39e9bf6951f2f2a65b640cbbaf0d1e758ac O(C)Md

ConnectionManagerReject.php May 8 php-malware-analysis

0b034d130038a1bcce19b2491c3426b502fbcf8bd8028f58f7ade8189bfd29ae O(C)

composer.json May 8 php-malware-analysis

3cfd1c99d62acb47ee4175eac05d72f80d42f703ecb46797b25b0f020a422758

dc2.php May 8 php-malware-analysis

3f1f2a99ff049b158e8101ed6a8e4bfb74c4316d69dcef756c255074b66e9fd8 K₂O₁₂(C₂₃As₇Ca₃Co₃Dy₃Er₃ILa₃Xe₆Eu₂PS₅)H₇(Po₈Cm₁₀CrDb₁₄F₁₀Os₅U)Md₄(PaPt₂)Th₃

b7.php May 8 php-malware-analysis

3f786bcee0b755e71b2995a16dee9ada69d79bbc44b178dffe19dc9f57f7caf3 O(As₂)Th

unequal.out May 8 php-malware-analysis

3fd89851c3d38d73bb42398587b44d03c358dc676f6a0b2cd9a5677d7e8b18c1 O₃(As₂CXe)H₂(PoOs)Th

3.2.3 May 8 php-malware-analysis

40c4322e2563ab507a15c373853181043de9ed41459bf6a652e560bdf50f1e24 K(Mc)O₈(C₁₀As₃CaLaP₃AlErXe)H₆(Cm₅Po₆CrDb₃F₁₀Os₃)Th₂

unequal.php May 8 php-malware-analysis

4389c9b2893b58595f8a0cc72bef2ddf089fb070aeb36b24f2a705f7513b54a2 O₂(AsC₂)H(F)MdTh

ConnectionManagerDelay.php May 8 php-malware-analysis

47054fed123aea2f7a218fa1d8b3f76ce884cf4581f070ddd63e15c9299f21ad O(C)Md

SecureConnector.php May 8 php-malware-analysis

48e1511c193eda5822473716709f8218304e49c48271bf5194c7ee8a65e3c759 O(C)Md

dc4.php May 8 php-malware-analysis

4b1f83e631f1f61c9cc871cbbc74c11d25249c894a02d754f24ae7f69bb97cc1 O₂(As₃C₃)H₂(PoF)Md₂Th

autoload_namespaces.php May 8 php-malware-analysis

4c2f698d8afae7289234607e8864e0b9961ecd9352cf8a380ea0a7c92118003b O(C)H(F)

dc13.php May 8 php-malware-analysis

4fdff0b5655552bd252a2a64972da5c5d6547b9428d83690c829bcadbe084de6 O₂(As₂C₂)Md₂(Pt)

Factory.php May 8 php-malware-analysis

523fd4c859e7e08004247df689b91cdbbbebb3cabfdf725b3684dbe8eee0fad8 O(C)

autoload.php May 8 php-malware-analysis

524c199961d014eb806031bbed165c057f52af2cad8b3c740bfc1d3cd72d26a1 O₂(AsC)Md

a1.php May 8 php-malware-analysis

534e70b88c6b4b717ce6e1137202ffbc7cdbdb3855dd58bf15192b7c9628bf17 O₂(As₂C₂)MdTh

ConnectionManagerSelective.php May 8 php-malware-analysis

54d4a5543dab5915b56aecb29348377eafa653579aeb1626a8e0613f183eb85b O₂(AsC₂)Md

Query.php May 8 php-malware-analysis

55549a1ee40522726daaf4ee53cc82aa9084d021d5972ea85580168f1ee3e8d6 Md(Pt)

dc7.php May 8 php-malware-analysis

5635516619a38b71ba2e9b4f16f46751332b37dde314cda0668394f21d743f5e O₂(As₂C)Md₂(Pt)Th

dc3.php May 8 php-malware-analysis

5645bc475922e5d3b4667d63907fc2e2a1080c3c678e91504ec51a1ac082890a O₂(As₂C₂)Md₂(Pt)

dc5.php May 8 php-malware-analysis

56f8f0f25c8bdf6682fbd4d9cda7f868e5a17d08e4edf95ea4f24d8d9e461f7a O₂(As₂C₂)Md₂(Pt)

comment.php May 8 php-malware-analysis

578feb000bc97db913b1a65a6e3ba7b70e3a35158fb3db8b53879ed72506cc73 O(As)

dc3.php May 8 php-malware-analysis

5923771654e514213263d8cf4b0c93a56fab489560bd98db92b4311ec8fecd32 O₂(AsC₂)H(Po)Md₂(Pt)Th

ConnectionManagerRandom.php May 8 php-malware-analysis

59aee5c6fa11f1884cbd7598d2804911b01902f3cd1e7600a7c32cb962ff0d0b O(C)

DeferredResolver.php May 8 php-malware-analysis

5e6aa8a9da370f67fedf7cc841f158b10926ac4c027e6f4d76dc60db58f7b5a1 Md(Pt)

ConnectionManagerRejectTest.php May 8 php-malware-analysis

6039b594aadb00cc76233a557e552c60d4f423fbdb5783385ba9130700e64999

b2.php May 8 php-malware-analysis

60d477ac61ea5e44693e8c6609d3a1f92129e73ab5e5352b59bd53a0bbf83910 O(C₂)

dc4.php May 8 php-malware-analysis

616f463b5138c4b690d9a0f1a05848d5f1c4a98d5b8be17e63a7e6c9cf6e64b1 O₂(AsC₃)Md

f3.php May 8 php-malware-analysis

61b70be66b033c41eb44a727314c3288e00c06e2b3b64ba5e3234429e08046f3 O₂(As₂C₃)MdTh

db64.php May 8 php-malware-analysis

61ffcf2bd9253c75029cb0d18394e13ac7f2137bc08fe80c8c58e72d0f3d2ae8 KO₂(As₂C₂)Md

dc7.php May 8 php-malware-analysis

65aa7291f9763e2df725ca04b68abb45ef0536af4270d62211b68df222694f5a O₂(As₂C₂)Md₂(Pt)

dc11.php May 8 php-malware-analysis

6634d2300276251c2a88eae446ddcee8254aeb672e86ca64af8705c80ed01043 O₂(As₂C₃)Md

dc2.php May 8 php-malware-analysis

665b43b09a9883313a66b5c0d6852e901e217a2f3914ff9c3ff79938846dc48c KO₈(C₁₀As₅CaEr₂XeDyILa₃)H₅(Po₅Cm₈Db₈F₅Os₂)Md₂(Pt)Th

CacheInterface.php May 8 php-malware-analysis

66de06c2eba0cc456ef731ed4f9a7149e488fca68fc23c8e0a45e9cc3fe62483 O(C)

RetryExecutor.php May 8 php-malware-analysis

68605fc371c9cd53fdab0b468d540e70edcd6176dca18129418c16b7142c18a7 O(C)Md

PromiseInterface.php May 8 php-malware-analysis

6c90de1639229ade3fd25685a9e412ad5fcfb74a38964a8d86ba864842ef5f6c Md₂(Pt)

dc1.php May 8 php-malware-analysis

c158a576fb50dd7b74ce9860005ebf1774769cc9f5fd32ef5799b9b6f6e5141c KO₂(AsC)H(Cr)Md₂(Pt)

zeroshell.php May 8 php-malware-analysis

c2fad7294353178d51f96f55c37a77c7cdcb66cd2cdf858aec9d5471c5c9faf4 O₂(CI)H₂(CmF)MdTh

dc1.php May 8 php-malware-analysis

701ef77fc84bd63b0f0cd7425db461b523de0c5898900a3fd3d174701018568a O₂(AsC)H₂(Db₂Po)MdTh

100% Obfuscated webshell payload

ReadableStreamInterface.php May 8 php-malware-analysis

714ab703b9b5352c7042864e7d4bbfb216e22400df474059a6b49849777efbd2 O(As)Md(Pt)

uc2.php May 8 php-malware-analysis

71b2d9917b814158ec9f6f2f43945c6e327de98986630ec98bf907d33c9d8b3e O₂(C₂As)Md₂(Pt)

ConnectionManagerTimeoutTest.php May 8 php-malware-analysis

725a8cf6bc6fcde4ee1d91c8898a76a82f1a775896eb118ccade5cdd7a6dfde3 O(C)Md

dc5.php May 8 php-malware-analysis

728083e7ccf250dd438078d7e720b32b1656da908423624979b58e2d646d7349 O₂(As₂C₃)H₂(CrDb₂)Md₂Th

dc1.php May 8 php-malware-analysis

754715a8ac95fb0f67761797deb4a8bf979ad96a05da3594032b2b3a3f4546ab O(As₂)

a2.php May 8 php-malware-analysis

7815915e23bd473ccde4cbedae6e8b930be1b82ffc33ed9c3838596cf0e32650 O₃(As₂C₃Xe)H₂(PoOs)MdTh

a8.php May 8 php-malware-analysis

78176f4075cf0c3e04f9dade7209d0cb9a2cfa0240ce1d5ba6b703058d6fa483 K₂O₁₂(C₁₉As₇Ca₃Dy₄Er₃La₂Xe₇AlICoEuS₄)H₇(Po₉Cm₈CrDb₁₀F₈Os₄U)Md₄(PaPt₂)Th₂

dc5.php May 8 php-malware-analysis

79bf531caa03262a7adafe6daa0384527fae4bdda92691272918f7a94d4c2d21 K(Mc)O₂(As₂C₂)Md