Extracted

• • Target

    f2e339b62797eb0f3e9efbb8955b73c7a3cec296b3b423a85dd1df9d49f295ec

  • Size

    50KB

  • MD5

    b98c5bbb2c825934271319f5c1258e1c

  • SHA1

    9211598f76c19007b1c34b1695d587de8a34646d

  • SHA256

    f2e339b62797eb0f3e9efbb8955b73c7a3cec296b3b423a85dd1df9d49f295ec

  • SHA512

    7af5109daf41836afc4ea77ea2693244f556ea1f123bf4487d9241e1cb2b4e4e95f637d8588749f847594c65cc6878aa930d49ddc92218037456cecd2c4002b9

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5dJYH:W5ReWjTrW9rNPgYoDJYH

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2