Open-source atomic malware analysis

Analyze another

system2022-08-22 2

PHP
Verdict: HOSTILE
SHA256: 856beff7281e884c4c6e6ee98edbfd4c2e76f9372c8426f30f1681e0553f85ee
Mal-ecule
O₂(C₂As)H₃(DbCmOs)
Size 392 B download
First seen 117 days ago
Analyzed 105 days ago
Ecosystem webshell

Objectives

suspicious severity, 70% confident.
command-and-control/backdoor/webshell AJAX request handler pattern
component severity, 90% confident.
anti-static/obfuscation/payload JavaScript function keyword in non-code file

Micro-behaviors

suspicious severity, 86% confident.
data/serialize Error-suppressed unserialize call
notable severity, 85% confident.
communications/http/request HTTP REQUEST parameter access ($_REQUEST)
notable severity, 70% confident.
os PHP error suppression operator usage

Identity

SHA-256 856beff7281e884c4c6e6ee98edbfd4c2e76f9372c8426f30f1681e0553f85ee
Filename system2022-08-22-2.php
Package system2022-08-22
Version 2

Origin

Source harvest
Feed datasets
Ecosystem webshell

Timeline

First seen 24 Apr 2026 16:15 UTC
Last analyzed 6 May 2026 06:23 UTC
Last updated 6 May 2026 06:26 UTC

Labeling

Label bad
Label source harvest
Traits version db300