Suspicious Python Execution of CAT File

Kaung Khant Ko@kaungkhantko

•updated Jun 15, 2026•5•0•38

Detects execution of a Python runtime loading a compiled bytecode file disguised with a '.cat' extension, a key defense evasion technique of NarwhalRAT.