eba9ae70d1b22de67b0eba160a6762d8

MD5 of `cmd3`, a Linux/Go SFTP staging client paired with `cmd1` in Salt Typhoon intrusions. Listed in Table 4 of the joint AA25-239A advisory; written by the same developer as `cmd1` based on shared Go build paths (`C:/work/sync/cmd/...`).

first seen

Aug 26, 2025

publisher

CISA / NSA / FBI