P.A.S. Webshell

MITRE
Malware Type:
Other
First seen:
Unknown
Last seen:
Unknown
Details:

[P.A.S. Webshell](https://attack.mitre.org/software/S0598) is a publicly available multifunctional PHP webshell in use since at least 2016 that provides remote access and execution on target web servers.(Citation: ANSSI Sandworm January 2021)

Associated Techniques (15)
ID ATT&CK Tactics
T1005 Data from Local System -
T1027 Obfuscated Files or Information -
T1046 Network Service Discovery -
T1059 Command and Scripting Interpreter -
T1070.004 File Deletion -
T1071.001 Web Protocols -
T1083 File and Directory Discovery -
T1087.001 Local Account -
T1105 Ingress Tool Transfer -
T1110.001 Password Guessing -
T1140 Deobfuscate/Decode Files or Information -
T1213.006 Databases -
T1222.002 Linux and Mac File and Directory Permissions Modification -
T1505.003 Web Shell -
T1518 Software Discovery -
Aliases (105)
Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell Fobushell
Metadata
ID: 188
Created: 13/01/2026 17:48
Updated: 06/03/2026 16:00