Extracted

• • Target

    c728a402b70d8fc297e34433487bd7fbf2d69fc7f74860c3b7ea3356fc44e006

  • Size

    899KB

  • MD5

    f4ab9e8ad1ce9c038f8339f205e63da8

  • SHA1

    d7c3da1900899a4d9bd8426193e7f4bd4230c576

  • SHA256

    c728a402b70d8fc297e34433487bd7fbf2d69fc7f74860c3b7ea3356fc44e006

  • SHA512

    40a9c021df554604f81bed649493ec23362dac02b7b02627b06d4ce1832f8586a38220cbd3858da05cb4c63c5015efdbe5ba8c5f6a65c09259e27a5422183b1f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXR:7wqd87VR

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2