Extracted

• • Target

    d4aeccc1b429fed1f28dddd4b0831197b78e18589feb53bb7f46241a4e881cc2

  • Size

    51KB

  • MD5

    8f76f62b1ffc2de562dbc8b5cf38966a

  • SHA1

    66a72250e7ab761fae7bff778542e8259b368a8a

  • SHA256

    d4aeccc1b429fed1f28dddd4b0831197b78e18589feb53bb7f46241a4e881cc2

  • SHA512

    bd010a06d8a02353b316a5ce31ccd0a0802f980439e070a68c121e593426a4fb89bbd214e6e6c2a3f64087a0607e68abfd589a5d16e1c7ef5218b1b1b5cb0a8c

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbo3JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2