Extracted

• • Target

    8bb08be0bfd95e920e80f6adc154f44b3b2489695c0e0bf62f7af59adcdaa914

  • Size

    51KB

  • MD5

    cd98fdb35c49edc82d04d5c4d7faa080

  • SHA1

    6574a251184a443f4799b027fe307a489653b40b

  • SHA256

    8bb08be0bfd95e920e80f6adc154f44b3b2489695c0e0bf62f7af59adcdaa914

  • SHA512

    205ff12767c71eb73fcb4df3e1ae1b15821354bc06072e9189f40f3d78fd3706f2a639b075939a06a052d20d42b651d59b1a4c2042e49259bc75bfe7405f6ee8

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLUJYH5:1dWubF3n9S91BF3fboIJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2