Extracted

• • Target

    e88c27ad70f89bf1966a1a4041034e4e17b9bb34b4bff7e0a392f5498238d58a

  • Size

    51KB

  • MD5

    7404f0c00d1e7676b5c34f2818bcd935

  • SHA1

    a84683f96f302f9ff04b0188402cb3f365b25661

  • SHA256

    e88c27ad70f89bf1966a1a4041034e4e17b9bb34b4bff7e0a392f5498238d58a

  • SHA512

    6544b2b43cc733ee5b704d7de976134aec12b71885a981d8d855369650e837f0b39bf95d08f5c66b7913647f64904f9d96af0ee7e8f45bb2d29f3f1647b1f57f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLRJYH5:1dWubF3n9S91BF3fbolJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2