Self-Deleting RAT Binary Post-Execution (GHAPPIER Final Stage)

Ibrahim Saud@tektrix

•updated 19 days ago•1•0•1

Detects instances where an executable file (exe, dll, js, cjs) deletes itself within 30 seconds of execution. This is a common technique used by malware to remove its installation artifact after spawning a persistent process or to evade signature-based detection.