Extracted

• • Target

    e1fb1bc53b951e214c048bfb681b2d8615a9e9755482b6e986d7cda352ab3ca6

  • Size

    51KB

  • MD5

    94b3b1708955c5896d830ec75878a9a2

  • SHA1

    3c7afb3a8cbad28bf2d6cfeeb81fc26c0c7e057e

  • SHA256

    e1fb1bc53b951e214c048bfb681b2d8615a9e9755482b6e986d7cda352ab3ca6

  • SHA512

    988924a561980281c763c87ec9a3a843b6f1576ccc87c68230f46ea90677ad007d0e90d7fb35d9b26293091f21847815ae9091d168ddf7922624db39e4e64e86

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbo8JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2