Extracted

• • Target

    5e7a216dfc75efff3fc37c71fb8565c1d62c3bdd41ccf1faef34a523b23f9c72

  • Size

    899KB

  • MD5

    d9408c95218bca5d39425762bf5c8e2e

  • SHA1

    fd32f807331a811119d3579c1e629ec091792d9c

  • SHA256

    5e7a216dfc75efff3fc37c71fb8565c1d62c3bdd41ccf1faef34a523b23f9c72

  • SHA512

    fb0bd1b06d13d44ce779b0a7e7a12f2012e6453c9e9fa763495c6661d919c84bfa74e5dfca7927ee3315c7ebfa785b0ec3b55757467288ccc1478912bd368736

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2