Extracted

• • Target

    5c76a600a5b22b45fd141e677aa5a331ec8af93f07b3006c2c2bd3632203193a

  • Size

    51KB

  • MD5

    7ec0eadb3129bbd1235f2c27eafa458c

  • SHA1

    258e7af0dcbfbf53d56289d7302aedf144b8e476

  • SHA256

    5c76a600a5b22b45fd141e677aa5a331ec8af93f07b3006c2c2bd3632203193a

  • SHA512

    7915579a0b725fd83ee0348df3f6095cb24ef2d6c09a3d3a2c15d773d33b19f44704bd543ee8126166be3c6858f9b8d473e4e604b05a493b0e6ac5307639d12d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLaJYH5:1dWubF3n9S91BF3fboGJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2