Extracted

• • Target

    5bc1b39dc6977ee3e84fb238aab35fae8284bf60d4a256ea501534c7a04cafba

  • Size

    899KB

  • MD5

    3d4e37bb0eee3155f743d489df60a574

  • SHA1

    d67f9571ea95e6a454238632de929db8c1851023

  • SHA256

    5bc1b39dc6977ee3e84fb238aab35fae8284bf60d4a256ea501534c7a04cafba

  • SHA512

    336d56d60e7e5e3870ca8c0380979d2836cb4fd9d525d5d5ee552e62f55232ea4a2b8df9b2645973419418cb79ca6bca399447b5f22a6e03a8c4ffbe0564ea63

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXf:7wqd87Vf

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2