Extracted

• • Target

    b1d1819acd6c3ff31cb495b45a2135468c4ae5d2d043de8eed77a8b8460dd4af

  • Size

    51KB

  • MD5

    85049d8d6946cde5c8dafad4556f58e5

  • SHA1

    3b8ac71d9bef495f07e54a886c3275a6f22c8004

  • SHA256

    b1d1819acd6c3ff31cb495b45a2135468c4ae5d2d043de8eed77a8b8460dd4af

  • SHA512

    1d6e5608db6c887b6c87c08ab64f8c7d8e5e6670f893a1d27626b8f044f8aff7a6bb462a01452814e35b444e7a987cbd6f2dee6e38c7d43e2eee27ec59b375ba

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL9JYH5:1dWubF3n9S91BF3fboJJYH5

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2