Extracted

• • Target

    0c4652b5f40426fee77fac80fd2e71a6ac41cb60b4b68781909d7e6c92aa50f1

  • Size

    899KB

  • MD5

    4344072dac6e1e8717ab6e6357bc0013

  • SHA1

    12cb74d85971ec0965413c9b23db009a389f5fa1

  • SHA256

    0c4652b5f40426fee77fac80fd2e71a6ac41cb60b4b68781909d7e6c92aa50f1

  • SHA512

    fa12bebfc2e62671c9280b5e406598321ea2a02c4bfe353912cc79b7a8b3c93f2ed483c408b56abb5fc490ddc7ce6be41bb4881286a666db9fbd8ae8d1155b6e

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXW:7wqd87VW

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2