Extracted

• • Target

    872da83b2397952195fb13f4b9d1ac2e8d6706b363949d5fdb03566b94705d9aN

  • Size

    51KB

  • MD5

    d3cb93d56c0af2fa41f1ee0ffcc4fac0

  • SHA1

    eda9fd116013923456fc80c384819a2d56dffa17

  • SHA256

    872da83b2397952195fb13f4b9d1ac2e8d6706b363949d5fdb03566b94705d9a

  • SHA512

    af0fefe42574fd5c61e4be69ed206a30fb35482609711b218146c3f77b8c7883c5c42cfcdca6cc0b5a79551622ee335cee1463adf78eff0dbd2c44d4f2c81679

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fboHJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2