Extracted

• • Target

    20c9e809fb6e049a9d9b4b1dded55b4dca2f82962ff717e4fba3890405d2ef0d

  • Size

    50KB

  • MD5

    76c63040d91c1bbcf8458f8292c7f72d

  • SHA1

    00db390a37b664fcf99d1697eb6a415d381bf406

  • SHA256

    20c9e809fb6e049a9d9b4b1dded55b4dca2f82962ff717e4fba3890405d2ef0d

  • SHA512

    065588f3248d6a78831ce1c96c4b09877cf831f7e8976547798141e5e228d3f1f4e64e291f9a81ad8a7109b5fb948f50008e96173d278f4bb3353e1694234438

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5pJYH:W5ReWjTrW9rNPgYoTJYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2