P.A.S.

Description

(US-CERT) This file is a malicious PHP file containing an embedded obfuscated payload. This payload is Base64 encoded and password protected.

Names

Name
P.A.S.
PAS
Fobushell

Category

Malware

Type

• Backdoor

Information

• https://www.us-cert.gov/sites/default/files/publications/AR-17-20045_Enhanced_Analysis_of_GRIZZLY_STEPPE_Activity.pdf
• https://blog.erratasec.com/2016/12/some-notes-on-iocs.html

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/php.pas

Other Information

Uuid

0c707538-47d3-4d55-903c-7dd6b6f4d909

Last Card Change

2022-12-28