Extracted

• • Target

    dd497185d784fac1236e95e470d103f8b42965c0119acfda35d792a8f56df9b2

  • Size

    51KB

  • MD5

    0e384c086e86e479e611623c745e39ad

  • SHA1

    d790a6f427c96c9868b8bf94599886015028ffa7

  • SHA256

    dd497185d784fac1236e95e470d103f8b42965c0119acfda35d792a8f56df9b2

  • SHA512

    0ac529519efd3af02b81cf5ef5a97b5374107a183d59ac2dd731fd46999e8bde97f654b4c7d4f19d569748e887bc4f53630b2cab9bc4644ef128f43e90c48599

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL0JYH5:1dWubF3n9S91BF3fboAJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2