MITRE ATT&CK Malware

Caterpillar WebShell (S0572)

[Caterpillar WebShell](https://attack.mitre.org/software/S0572) is a self-developed Web Shell tool created by the group [Volatile Cedar](https://attack.mitre.org/groups/G0123).(Citation: ClearSky Lebanese Cedar Jan 2021)

Platforms: Windows

▪Techniques implemented (15)

T1057Process Discovery T1005Data from Local System T1016System Network Configuration Discovery T1083File and Directory Discovery T1110Brute Force T1059.003Windows Command Shell T1007System Service Discovery T1112Modify Registry T1069.001Local Groups T1041Exfiltration Over C2 Channel T1082System Information Discovery T1033System Owner/User Discovery T1105Ingress Tool Transfer T1014Rootkit T1046Network Service Discovery

▪Used by groups (1)

G0123Volatile Cedar

S0572on MITRE ATT&CK →

MITRE ATT&CK Malware

Caterpillar WebShell (S0572)

ShareX LinkedIn Reddit HN

Platforms: Windows

▪Techniques implemented (15)

▪Used by groups (1)

G0123Volatile Cedar

S0572on MITRE ATT&CK →

Caterpillar WebShell (S0572)

▪Techniques implemented (15)

▪Used by groups (1)

Explore Gold

Security Data & Tools

Products

Use Cases

Company

Caterpillar WebShell (S0572)

▪Techniques implemented (15)

▪Used by groups (1)