H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

Pasam

[Pasam](https://attack.mitre.org/software/S0208) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor on compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Pasam May 2012)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Pasam](https://attack.mitre.org/software/S0208) is a trojan used by [Elderwood](https://attack.mitre.org/groups/G0066) to open a backdoor on compromised hosts. (Citation: Symantec Elderwood Sept 2012) (Citation: Symantec Pasam May 2012)

Labels

malware
9 recorded

Relationships

uses
from Elderwood
Group
uses
to Data from Local System
Technique
uses
to File and Directory Discovery
Technique
uses
to File Deletion
Technique
uses
to Ingress Tool Transfer
Technique
uses
to Local Storage Discovery
Technique
uses
to LSASS Driver
Technique
uses
to Process Discovery
Technique
uses
to System Information Discovery
Technique
4 external

References

mitre-attack
S0208
open
Pasam
—
Symantec Pasam May 2012
https://www.symantec.com/security_response/writeup.jsp?docid=2012-050412-4128-99
open
Symantec Elderwood Sept 2012
https://web.archive.org/web/20190717233006/http:/www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/the-elderwood-project.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance