Extracted

• • Target

    bf34369d8a4c147898f9da32a38d07d34919eb7c09dbf48c65a571243a0c5dfaN

  • Size

    49KB

  • MD5

    1e0483533d828e45715fca4496440b60

  • SHA1

    a18d5cf992127af0a3188fac58ce24ae7fa66036

  • SHA256

    bf34369d8a4c147898f9da32a38d07d34919eb7c09dbf48c65a571243a0c5dfa

  • SHA512

    41a7e3ecc26eb01d16c14a883e636a5f23a1ce53f2f5b904c6092ec9473e8404f32785b84aa727f5519b2721ac31433a4ce827b397e3c1a598b0255d860d0abf

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOAJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJfJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2