2022-08-26 08

PHP

SUSPICIOUS

Mal-ecule

Size 62 B download

First seen 118 days ago

Analyzed 116 days ago

Ecosystem webshell

Objectives

anti-static/obfuscation PHP dynamic function call ($var($args))

command-and-control/backdoor AJAX request handler pattern

communications/http/request HTTP GET parameter access ($_GET)

file Sparse string pool in PHP

package Very short file (under 12 lines)

SigBase/WEBSHELL/PHP PHP webshell using function name from variable, e.g. $a='ev'.'al'; $a($code)

SHA-256	2de584e2baeecb0f27064960daf7ae4e5e418457c3fbf57aa96e2bd80b828e9f
Filename	2022-08-26-08.php
Package	2022-08-26
Version	08

Not seeing what you expected? Let us know