Extracted

• • Target

    4a189e274b05eb5763a072679597249b4fc6f2663d6b4815af93066cbc9bfce6

  • Size

    50KB

  • MD5

    eacde9044296bfc012ecb39a32289bac

  • SHA1

    ff77a799ebbe4901180973f285332b5bd57c28d9

  • SHA256

    4a189e274b05eb5763a072679597249b4fc6f2663d6b4815af93066cbc9bfce6

  • SHA512

    d43b5a2654d28365e034633bc29271f48f26a0aaf7e4500aeee779991cde60b14ac64ab39cabf26ca1b3a1e6fdd14b2acea2b49e46bf4b71637683fb8d617c10

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5aJYH:W5ReWjTrW9rNPgYocJYH

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2