Extracted

• • Target

    e6470a70fde65204efec6e86686005c75829794795f1b808aac2a2f333566ff2

  • Size

    899KB

  • MD5

    9c5f28942617ad38c84d8e7a6a6a4b04

  • SHA1

    630321fe05378a172d429e91b84f610867461b15

  • SHA256

    e6470a70fde65204efec6e86686005c75829794795f1b808aac2a2f333566ff2

  • SHA512

    3dd359edbc0dfc90e237c31ddbfaa0b71cb20ca6010ca0250dfae0c00a8c37ac20600ac0b0fa86acfc0f555d1a43fb447bdd98e4a6a0df1b604e85a8e4e37782

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2