Extracted

• • Target

    04db7f5625b4463f1a207383bdb33c1799a7cabc4c257925dcdba3e58a3c36ac

  • Size

    51KB

  • MD5

    43ee5375debc9c3c47d5126e31d0c812

  • SHA1

    8cb6fca4f60203fb2c6775cdeaf9f3b88e2af8fa

  • SHA256

    04db7f5625b4463f1a207383bdb33c1799a7cabc4c257925dcdba3e58a3c36ac

  • SHA512

    70f989c41746b341991751a294aca558723baa6b80228d024c3b1827f54fa293a0e93cecd47b979e98614b131309c90a565ce90e54a0c6abc988d2d5fb08030f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLvJYH5:1dWubF3n9S91BF3fbobJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2