Extracted

• • Target

    e2a5c5d26b3b9ce14df084bcaba51de00285f7a96a8e42e518631c7ed32ea9f9

  • Size

    899KB

  • MD5

    19865269e8dd0e5dc56832d2a670d267

  • SHA1

    c34395609287217a2da0cc0493e9a2b61857c3c0

  • SHA256

    e2a5c5d26b3b9ce14df084bcaba51de00285f7a96a8e42e518631c7ed32ea9f9

  • SHA512

    cd66ce7c9ec573e945d7ca6f3397b8384ec38c14d462b2cbe651b30f00aed6ca57e315ae0b5d745fb466c7679ede6dede603a1b1e3ff137eeb02312d2b245092

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX/:7wqd87V/

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2