H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Malware

4H RAT

[4H RAT](https://attack.mitre.org/software/S0065) is malware that has been used by [Putter Panda](https://attack.mitre.org/groups/G0024) since at least 2007. (Citation: CrowdStrike Putter Panda)

Malware
TypeMalware
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[4H RAT](https://attack.mitre.org/software/S0065) is malware that has been used by [Putter Panda](https://attack.mitre.org/groups/G0024) since at least 2007. (Citation: CrowdStrike Putter Panda)

Labels

malware
7 recorded

Relationships

uses
to File and Directory Discovery
Technique
uses
to Process Discovery
Technique
uses
to Symmetric Cryptography
Technique
uses
to System Information Discovery
Technique
uses
to Web Protocols
Technique
uses
to Windows Command Shell
Technique
uses
from Putter Panda
Group
2 external

References

mitre-attack
S0065
open
CrowdStrike Putter Panda
http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance