Extracted

• • Target

    023b3bac06db3571874f91bb432a0ecbabc2cdcc69f8dc0c5bc06c17dc50078f

  • Size

    899KB

  • MD5

    a842d1204270f30c700d2fe79c4cda28

  • SHA1

    1e49183270117c9ce9546f283b08496b4a42c1c1

  • SHA256

    023b3bac06db3571874f91bb432a0ecbabc2cdcc69f8dc0c5bc06c17dc50078f

  • SHA512

    52cded6676412dab2ff34a3baa92503c666e5c54910b8ee23a474e54d73fbd62282c15f281894bef08d54772a6a430b574bf4ab9177b0df7330d79d604ea64ba

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2