PULSECHECK — Malware Profile

PULSECHECK is a web shell written in Perl that was used by APT5 as early as 2020 including against Pulse Secure VPNs at US Defense Industrial Base (DIB) companies.

MITRE ATT&CK techniques (4)

• T1059.004 Unix Shell
• T1071.001 Web Protocols
• T1132.001 Standard Encoding
• T1505.003 Web Shell

Attributed threat actors

• APT5

Read the full analysis on IntelFusions