Extracted

• • Target

    643584b8d2baa92b7aac3f97aca9a9f52bb7c211b4db77c17c11f2540ae9d335

  • Size

    50KB

  • MD5

    db3d5b89a6769f5af34f839a8eef2e78

  • SHA1

    09317da75eab700e1fa6c779d9d16eedfe37b6dc

  • SHA256

    643584b8d2baa92b7aac3f97aca9a9f52bb7c211b4db77c17c11f2540ae9d335

  • SHA512

    7917c6e54453fa77e9137d2517f4f1c10ce0058cc0f4e3ff0db4f99c70f589765a9d4873f3c40e3472f0e49b0df3d0588c50472e510988a9209e720e261f01c5

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5WJYH:W5ReWjTrW9rNPgYowJYH

  Score

  10^/10

  gh0stratrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2