Extracted

• • Target

    6c7e0dfd694b274e5b1a50c97f507880f65a103bf29464cb977353af0fa87cd9

  • Size

    899KB

  • MD5

    1b9d02e3e920e21416e4501cc3dee9dd

  • SHA1

    616efff70066fd5f7ae05f9a559e3c5f735d7c8d

  • SHA256

    6c7e0dfd694b274e5b1a50c97f507880f65a103bf29464cb977353af0fa87cd9

  • SHA512

    87417ff44e4e49043297ecb9407cbd946e46d78e2c21ebd18bcc4ad9f40ac52b99aa4797aff22433aa7bc2e58464bce2aa420ea0691918f83e58a59f5e2bb6b2

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXr:7wqd87Vr

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2