Extracted

• • Target

    1c6ff5d8e21f75fe84ebc1e05cefd15f565f5e2e23d65c1e9b23ba6ff478e015

  • Size

    51KB

  • MD5

    f7d2b3c403bc6cd409f5165e4e9ff0fc

  • SHA1

    8cae1e9ec6c1076a0f2a5f81ce20fd94cad08ed1

  • SHA256

    1c6ff5d8e21f75fe84ebc1e05cefd15f565f5e2e23d65c1e9b23ba6ff478e015

  • SHA512

    2a8db1f2702b617c6c5eb57c44c89e3cc9e103957a08a7de45a110b5edfc7f6ba329b3f58c184cf2d8c658ec1a86b90e24d7897f07d742856c2fb1a33b9e28f9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLOJYH5:1dWubF3n9S91BF3fbo6JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2