Extracted

• • Target

    2fa89631c1f8afe7f9921c998894fbd58e6865a6f38623734c4c6d7eccec6148

  • Size

    50KB

  • MD5

    9d800071053269a082a68d51ba0b0178

  • SHA1

    f3538561fa6731963bbcedba0bb98f605919b89c

  • SHA256

    2fa89631c1f8afe7f9921c998894fbd58e6865a6f38623734c4c6d7eccec6148

  • SHA512

    e60972fabecbdb5c480c4f41c449f57a6db4320d49e616e997e17e41d23f3a62071a7b1694947b3502ebf31140788738fc2e701ece1088450fb8c9e428050e4c

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5oJYH:W5ReWjTrW9rNPgYo6JYH

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2