Extracted

• • Target

    ebcd38a32f436bfd98333a03a9875e8e2294640e53fb1d4dfbf6d8c2db99e726

  • Size

    51KB

  • MD5

    b4455c70e091ae499d364e32b9adc3c2

  • SHA1

    fdb68dc3583682503a7a0c4feb734eaa9a718321

  • SHA256

    ebcd38a32f436bfd98333a03a9875e8e2294640e53fb1d4dfbf6d8c2db99e726

  • SHA512

    1b594b07a1332eff50c6f2395641202faac5fd3dd73c53f785aa04f6c9c97813362f614e93be1e8be2e963c9ddfaad58e0a3f11b5ad632b5d43c14a7c471ab2c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLdJYH5:1dWubF3n9S91BF3fboRJYH5

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2