Extracted

• • Target

    e97ddcbd3df8d8f9ded805e4528937f3ce87a3db37aa5e47ad40781dece50589

  • Size

    50KB

  • MD5

    b5bbf83679bbc895674f51b15915a0e1

  • SHA1

    cb0e38ad4f0a766f656416bba1094a93bff6abcd

  • SHA256

    e97ddcbd3df8d8f9ded805e4528937f3ce87a3db37aa5e47ad40781dece50589

  • SHA512

    b9f5a3ed957ca4f457fc1bcf74ae8591ab6d5a65f761a11b41c7d4f91460395d390bec7759637984fc1f1567cc11ebf3ffd9f073f2957219ad9c7d1838aebe51

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o55JYH:W5ReWjTrW9rNPgYozJYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2