Extracted

• • Target

    e9584b02321fa67daa717ee06963b3e7b23618d4f30e4cfb9d1740adee41f096

  • Size

    51KB

  • MD5

    a8b09b032f95e2d015c997309b0c2302

  • SHA1

    89d403fbace6eb8ea85653c6237c6fa12fca8090

  • SHA256

    e9584b02321fa67daa717ee06963b3e7b23618d4f30e4cfb9d1740adee41f096

  • SHA512

    dace0657bc13dd7afec2bc8a9b478c0a94c191288ad0b994d0ced694a6dba1f7aa2e0b37f3bbad4ffef27dd6b2b6b8d9b1e5a9aa4f6837c22c86bb289f1425bb

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLdJYH5:1dWubF3n9S91BF3fbohJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2