Extracted

• • Target

    42fd213d1ef9b85e9aeed4e147f1ca35ff668fe3eb4f5bc6d00ebdf7441bc812

  • Size

    51KB

  • MD5

    ed6a70ae7a2ce0d2c7e3129bd7734254

  • SHA1

    f73b915d6ca02dcd4691fe9021e8020cadec5c32

  • SHA256

    42fd213d1ef9b85e9aeed4e147f1ca35ff668fe3eb4f5bc6d00ebdf7441bc812

  • SHA512

    a0a4ca3784cf58a86c6979d348f9066a99ba2f70da2cdd4ff9f15e47a24cff81c37c460503a5db7886cc0a2c4b961f09b4035723848516621e925d98667f861d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLzJYH5:1dWubF3n9S91BF3fboXJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2