Open-source atomic malware analysis

Analyze another

wp-engine-fast-action.php

PHP
Verdict: HOSTILE
SHA256: e02aedb126f5e1243fb129a49cdca40d4cdd10dcb43edae769480789ca672c3d
Mal-ecule
O₂(C₃As₃)H(F)Md
Size 951 B download
First seen 117 days ago
Analyzed 106 days ago
Ecosystem malcontent-samples

Objectives

suspicious severity, 70% confident.
command-and-control/backdoor/webshell WordPress role assignment
component severity, 80% confident.
anti-static/obfuscation/encoding Dynamic function call via variable function name
component severity, 92% confident.
anti-static/obfuscation/payload Regex component marker

Micro-behaviors

notable severity, 85% confident.
fs/path/application Base64 encoded WordPress plugin path

Metadata

notable severity, 90% confident.
encoded-payload Encoded payload detected: base64

Identity

SHA-256 e02aedb126f5e1243fb129a49cdca40d4cdd10dcb43edae769480789ca672c3d
Filename wp-engine-fast-action.php

Origin

Source harvest
Feed datasets
Ecosystem malcontent-samples

Timeline

First seen 24 Apr 2026 16:18 UTC
Last analyzed 6 May 2026 01:23 UTC
Last updated 25 May 2026 19:31 UTC

Labeling

Label bad
Label source harvest
Traits version 84923