Local reference
Suspicious dependency
Inferred
Mal-ecule
O(As₂)H₂(DbPo)
Objectives
suspicious severity, 88% confident.
anti-static/obfuscation/encoding
Function name built via chr() concatenation pattern
suspicious severity, 90% confident.
anti-static/obfuscation/string
Dense chr() calls (string building)
baseline severity, 70% confident.
anti-static/obfuscation/code-metrics
Low identifier reuse ratio
component severity, 84% confident.
command-and-control/backdoor/webshell
Near-zero whitespace script
component severity, 100% confident.
impact/dos
Amplification payload suffix after chr() sequence
Micro-behaviors
notable severity, 100% confident.
process/interpreter
PHP variable function invocation pattern
Metadata
baseline severity, 90% confident.
encoded-payload
Decoded unicode-escape content
component severity, 100% confident.
file
Document or config file extension (md/php/txt/xml)
component severity, 90% confident.
file/text
Very long line
component severity, 95% confident.
lang
PHP opening tag present
Identity
| SHA-256 | 79a1a0c74b0dbca9848de3dce283cc29b8f502f5ec3e82f2e14f0e0ae41b6a93 |
|---|---|
| Filename | 015.php |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 4 Jun 2026 23:20 UTC |
|---|---|
| First analyzed | 7 Jun 2026 22:25 UTC |
| Last analyzed | 7 Jun 2026 22:25 UTC |
| Last updated | 7 Jun 2026 22:25 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 8e9ac |
Not seeing what you expected? Let us know