.. /.Timer

Executable
Native

Author:

@TalenceSecurity

Description:

Adversaries may abuse systemd timers to perform task scheduling for initial or recurring execution of malicious code. Systemd timers are unit files with file extension .timer that control services.

OS:

Linux

Recommendation:

Monitor the use of ".timer" files

Resources:

https://attack.mitre.org/techniques/T1053/006/

File Samples:

Contributions: