Extracted

• • Target

    1f293f1f02fb00442e86f6e96248a1cfbd47281bdd218204fe47369be195cba2

  • Size

    51KB

  • MD5

    67ca441fcb0fd613113ef7f8a105f0b0

  • SHA1

    fc076ed5869fe5aaa7237a0355393803789129f0

  • SHA256

    1f293f1f02fb00442e86f6e96248a1cfbd47281bdd218204fe47369be195cba2

  • SHA512

    4831884869f8fcab77cbca6859239860d6ba9f27c1c5ddf5a92eb8b42593b941c609fefecb9a081c0d6e57b0d60df79770a8a82ba4a83d0767ab36405fa5f185

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL6JYH5:1dWubF3n9S91BF3fbo2JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2