Extracted

• • Target

    b0d889d3eb97a0a95f40169eee53be2206bd391c7c90d52f26f0b1e6cb30ddfb

  • Size

    899KB

  • MD5

    7ebed694d0da74243b399b6f130de329

  • SHA1

    20d94df0a08bc790cd1290dd2dd03c16b35047c6

  • SHA256

    b0d889d3eb97a0a95f40169eee53be2206bd391c7c90d52f26f0b1e6cb30ddfb

  • SHA512

    2e74029ba27c6d0da29ff3434a1e6c597b458ce10a3509fecf1cffee3356f36adf5b0bfda79f58072acf18dd314af18084bc26363df84808b3229696f148b0bb

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXl:7wqd87Vl

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2