Extracted

• • Target

    156c39301cceee39595bcdbf60eeab3d450053c606675040696b55f2eaeb7629

  • Size

    899KB

  • MD5

    364b224cfbf57b3ecb2e5b8fd143664b

  • SHA1

    fab2f3c41000db312eed25455035dc1aabf64ff9

  • SHA256

    156c39301cceee39595bcdbf60eeab3d450053c606675040696b55f2eaeb7629

  • SHA512

    9e14ee4379aa34055d755c68ecd5326bd71c71a3c0065ffabde7f0a58b0051ccfdfe72fa49968a3c4f017c36ec3a4f99b312485bdee59c44ebaa820fb1d8d6c0

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2