Extracted

• • Target

    e56a9c5e4f5f672fe12d029507bcf9e39e81640579eafe91b2114f1aa3adefb9

  • Size

    899KB

  • MD5

    09a4fd759a174b6677393f1b75eaaf35

  • SHA1

    e6560583606ded8c4ee702d88114f91525958a87

  • SHA256

    e56a9c5e4f5f672fe12d029507bcf9e39e81640579eafe91b2114f1aa3adefb9

  • SHA512

    a95c23a68421ef6946f6df4d628e1b6b19b6e20ff63b3bd360f6084bc3e4b4684824f2f92b9cfa30fa362eca8bd255ce89496f600eb4dde6d47bb2e974972f8b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX5:7wqd87V5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat
  behavioral1behavioral2