Extracted

• • Target

    0d814b28eb14359107b0c5720f5441bf240ca18db7a6c5cd070be768874b795b.exe

  • Size

    51KB

  • MD5

    d5e487d75978b1e41707220c257d7a4f

  • SHA1

    897b1e82ccfc4a844eeecdaff44cb8239d458d72

  • SHA256

    0d814b28eb14359107b0c5720f5441bf240ca18db7a6c5cd070be768874b795b

  • SHA512

    2b85c05059033aa27affeaed11598c9998c2adf114003eeaae5bc8b0944f7894b494c1a3d58bfbd6df3e5c486d271961a5d1c884a4e4c0ab0a93cb5421b9cb32

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboIJYH5

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2