Extracted

• • Target

    c35ce9cb0f4308476356c8ac70b3823f2ff1313701268962b351ec0d7bbf6092

  • Size

    51KB

  • MD5

    f7c470b5c7381277cebe76474c6c9f38

  • SHA1

    f81fb6eaa109cf02ef0a540df9cde202bcf5c3c4

  • SHA256

    c35ce9cb0f4308476356c8ac70b3823f2ff1313701268962b351ec0d7bbf6092

  • SHA512

    bcce8fd91306d8361fc756a4c0b6ccabd958f7556f6c831e4adb03d0260f9df265ab4a2a355325816527d45f9e2cc547f980ec1cae75c7c6746e8a3630ccf3f9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fboRJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2