Extracted

• • Target

    0c0a11f29c0a1953483dbe7183c2c42c71c116819d450b4261b9a1e81f1d66e9.exe

  • Size

    51KB

  • MD5

    c2080d22d655dc547573f9bb4194649d

  • SHA1

    a0e2a5ae1a168ade9fbee1c60e1621c0865c610f

  • SHA256

    0c0a11f29c0a1953483dbe7183c2c42c71c116819d450b4261b9a1e81f1d66e9

  • SHA512

    6b1af3e32c9119c83e63e1808146db6323a8c45785761ab1996c5b1aa30a89ef109d725321886a0774468c76e7d03e1c54b26e725dd7a975b6cdf393c9bd4b15

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fbowJYH5

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2