Extracted

• • Target

    3278458d8ec2150323075f08c81ab95da297b949fb8295db41d6b06a3f2491d0

  • Size

    51KB

  • MD5

    9ed61f685703c17c602183ba909b311d

  • SHA1

    59441f7ae0322e955dc0b5b19f404e79f314d763

  • SHA256

    3278458d8ec2150323075f08c81ab95da297b949fb8295db41d6b06a3f2491d0

  • SHA512

    0b474df8eb917268ca565fb59fc6259b3b8f7c92528c88fdbe8eb7244fcee951dbf0767e99dc0f84a9d0b8122c1deff60c218137ac5ef5f3389742e0808c1561

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLiJYH5:1dWubF3n9S91BF3fboOJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2