Suspicious Python Execution of CAT File

nomit vyas@xoxo

•updated Jun 24, 2026•0•0•6

Detects execution of a Python runtime loading a compiled bytecode file disguised with a '.cat' extension, a key defense evasion technique of NarwhalRAT.