Extracted

• • Target

    fa333f0009817e1ab8ee32acbfa4198ed00cc9891f8e0a5a4b7463be00ecb449

  • Size

    50KB

  • MD5

    a8bb75c925b7d7b811fb1b8b080f0b20

  • SHA1

    61eb94d3665fec421e87b6cabcff0830b762d120

  • SHA256

    fa333f0009817e1ab8ee32acbfa4198ed00cc9891f8e0a5a4b7463be00ecb449

  • SHA512

    778a367c988ddbb4eaec5d9e274a163f24466f283438ac9f29ef4cbf17ab9d8248c247f945462a80309fdd1754ef1c6bca0310409b33b7ac02b515ee65efc598

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5GJYH:W5ReWjTrW9rNPgYoQJYH

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2