The challenge was based on drupal7 with obvious unserialize call added.
Trying to build a chain and the first solution i found was based on following chain:
./includes/bootstrap.inc
abstract class DrupalCacheArray
    ...
    public function __destruct() {
        $data = array();