Extracted

• • Target

    afdd9688c8ef5abc7e229302d7863402f7a052b61662e5863e03eebe8d9bb77c

  • Size

    51KB

  • MD5

    c58cf22008c36e6ffe476922dd6c5196

  • SHA1

    0548ecc7ecc44a58ad0290b12663b406f74a0143

  • SHA256

    afdd9688c8ef5abc7e229302d7863402f7a052b61662e5863e03eebe8d9bb77c

  • SHA512

    f64395259a08ceb6bf12b93a9060d816678e75c4b3e25210563b747e9e865bb869be5811f50db3c1c7c356d939a66db7728d25fd4ac1122ebf5127b753c3a8b6

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fbosJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2