data/abilities/command-and-control/8a1913ed-4ddf-497c-8f95-ebf1eb93b518.yml

---

- id: 8a1913ed-4ddf-497c-8f95-ebf1eb93b518
  name: Install Counterfit
  description: Creates a virtual environment and installs counterfit into it.
  tactic: command-and-control
  technique:
    attack_id: T1105
    name: "Ingress Tool Transfer"
  platforms:
    linux:
      sh:
        command: |
          chmod +x ./counterfit_install.sh; ./counterfit_install.sh
        payloads:
          - counterfit_install.sh
        parsers:
          plugins.stockpile.app.parsers.basic:
            - source: host.install.counterfit
        timeout: 2400