Netskope Threat Labs

SmlWebShell

ATP Sandbox Adv. HeuristicsAV

This generic detection identifies PHP-based web shells that provide remote command execution capabilities on compromised web servers.

First seen
March 2023
Last seen
September 2026
Alert Name
Generic.PHP.SmlWebShell.B.016A16F3
Generic.PHP.SmlWebShell.B.017B59DF
Generic.PHP.SmlWebShell.B.01988C28
Generic.PHP.SmlWebShell.B.02067C4F
Generic.PHP.SmlWebShell.B.02E85923
Generic.PHP.SmlWebShell.B.03212462
Generic.PHP.SmlWebShell.B.0432350E
Generic.PHP.SmlWebShell.B.04E7D410
Generic.PHP.SmlWebShell.B.06B39CCB
Generic.PHP.SmlWebShell.B.08171FF2