Extracted

• • Target

    2b39fd49c77f4f8c2497ea73db1ed7d25dfac7ea0e34c3b30b9fc5484c50d789

  • Size

    899KB

  • MD5

    f658b414f0962880a5338606635b1919

  • SHA1

    66bcb827cec65695c42f66b0d90dc8a94bb7f097

  • SHA256

    2b39fd49c77f4f8c2497ea73db1ed7d25dfac7ea0e34c3b30b9fc5484c50d789

  • SHA512

    53ad1d85d6d8ab72a17df04ed74d508b1a90fcc4b2ffd6e990d791d35ec588b52df6064e2be5d45ba55635e224f3491255cd2cbd327ef91a1a1621d6bd54f463

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXw:7wqd87Vw

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2