Extracted

• • Target

    0d2efdffa4070f0633caf427cacb9830N.exe

  • Size

    899KB

  • MD5

    0d2efdffa4070f0633caf427cacb9830

  • SHA1

    6a230f7ffd4771b63e27216b5271ace89148416a

  • SHA256

    efe99282c528a178b121b4610eebcf3617beb9a49737532bce215cab067199e0

  • SHA512

    796c9263b0ebad283b471ad64d956aa405f4e807502c83728090da13f12538bc83a798715d413df99773b16890065bb7dc050866c6fcea8328b4624261dc1570

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXp:7wqd87Vp

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2