Extracted

• • Target

    179cde86e4084ce0a9ceffacc08d90ac0dbcd3835d0e1e830e1d8a5b62ee5102

  • Size

    899KB

  • MD5

    7d17c4075d2564cb0b7f5e0674579837

  • SHA1

    0b132d07eaecc2b9354214477eec38297c635a95

  • SHA256

    179cde86e4084ce0a9ceffacc08d90ac0dbcd3835d0e1e830e1d8a5b62ee5102

  • SHA512

    5493d3066027e86b12a2cc6bdbd4c21846a71954d50ddd8af3343e1c5bc425092d3a402c7308e70a1e0b5d1d871d53f4aec22fc584b41c4912433dbbf3f6c8d6

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX4:7wqd87V4

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2