Extracted

• • Target

    dcdd495f645bf9f58a0d61cb6c64b6a31798d9882426e4eea4e813ce936879e8

  • Size

    51KB

  • MD5

    2cc3574dfe100dade4305cc9827e45dc

  • SHA1

    1ccd2617953f239d61c2f3003c5fce923624ce01

  • SHA256

    dcdd495f645bf9f58a0d61cb6c64b6a31798d9882426e4eea4e813ce936879e8

  • SHA512

    60c0a4aa923e4536f972384af2a78d3b0efedd198ce4eb9d99eb713efab60b7836d5fb0ff5fdc79d31323fdf6783f84b2c208d03793d3e6aa41afce2b0ae928a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fbo4JYH5

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2