Extracted

• • Target

    4c0748946bffdf4d626b1846c68873043b1bfac25505a9c77a0fe6ce2ccbfde0

  • Size

    51KB

  • MD5

    b2d59ae0b34e123f2217adcea9c461d9

  • SHA1

    be7f556bb4065caea30f077b3eaa434570b79f20

  • SHA256

    4c0748946bffdf4d626b1846c68873043b1bfac25505a9c77a0fe6ce2ccbfde0

  • SHA512

    c78ba90c0f4555697896e2ea672638a164770c7c7a6b8ffdaa04c02672849e8e1a4b7d2d8d21f9830b1ee94748cdd7916b7e9fb306d67c10536cbed944a7b863

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLjJYH5:1dWubF3n9S91BF3fboXJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2