Extracted

• • Target

    a393bc6cc3a743db112cf22999f6408e2ccf3b4647f07dcec4bf85b8d33a198b

  • Size

    899KB

  • MD5

    6645006423206977e09ed4ff3c727d21

  • SHA1

    b94d838653623eaa4db217be3f0ed67350122cc8

  • SHA256

    a393bc6cc3a743db112cf22999f6408e2ccf3b4647f07dcec4bf85b8d33a198b

  • SHA512

    d111b65d94d5b0081a9784dbc03cf7c4b343aba6141c68ea34fc3abf464a0875fa47add12de55e3f7e1aebd8120937e5430794cb73e189e3cd88ea2aac62f12a

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXO:7wqd87VO

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2