# Caterpillar WebShell
> Tipo: **malware** · S0572 · [MITRE ATT&CK](https://attack.mitre.org/software/S0572)
## Descrição
[[s0572-caterpillar-webshell|Caterpillar WebShell]] é uma ferramenta Web Shell de desenvolvimento próprio criada pelo grupo [[g0123-volatile-cedar|Volatile Cedar]].
**Plataformas:** Windows
## Técnicas Utilizadas
- [[t1057-process-discovery|T1057 - Process Discovery]]
- [[t1005-data-from-local-system|T1005 - Data from Local System]]
- [[t1016-system-network-configuration-discovery|T1016 - System Network Configuration Discovery]]
- [[t1083-file-and-directory-discovery|T1083 - File and Directory Discovery]]
- [[t1110-brute-force|T1110 - Brute Force]]
- [[t1059-003-windows-command-shell|T1059.003 - Windows Command Shell]]
- [[t1007-system-service-discovery|T1007 - System Service Discovery]]
- [[t1112-modify-registry|T1112 - Modify Registry]]
- [[t1069-001-local-groups|T1069.001 - Local Groups]]
- [[t1041-exfiltration-over-c2-channel|T1041 - Exfiltration Over C2 Channel]]
- [[t1082-system-information-discovery|T1082 - System Information Discovery]]
- [[t1033-system-owneruser-discovery|T1033 - System Owner/User Discovery]]
- [[t1105-ingress-tool-transfer|T1105 - Ingress Tool Transfer]]
- [[t1014-rootkit|T1014 - Rootkit]]
- [[t1046-network-service-discovery|T1046 - Network Service Discovery]]
## Grupos que Usam
- [[g0123-volatile-cedar|Volatile Cedar]]
## Referências
- [MITRE ATT&CK - S0572](https://attack.mitre.org/software/S0572)