search

scr34m / php-malware-scanner

Scans PHP files for malwares and known threats
GNU General Public License v3.0
556 stars 96 forks source link

Ofuscated file with lots of simple equations #14

Closed jaygilmore closed 6 years ago

jaygilmore commented 6 years ago

This file was not detected by our grep patterns or php-malware-scanner but it contains a lot of very obfuscated variables and definitions and contains a wide variety of simple math equations.

https://gist.github.com/jaygilmore/ea650c3301c775b12b8e4e5de15f54d0

scr34m commented 6 years ago

Similar like to which one is reported in #9, xor code is different, now used variables.

scr34m commented 6 years ago

Another pattern created

jaygilmore commented 6 years ago

Thanks so much. Will test.