Extracted

• • Target

    2454a3bbb603ff733bdaa6325b897a47e221a7b48326d1a01e4c5835c319672e

  • Size

    51KB

  • MD5

    31e750213ea1198d1f9bdedd7b4a215c

  • SHA1

    348b3b5f4acfd4d7760b8c7cd827d7a5c5fbec8c

  • SHA256

    2454a3bbb603ff733bdaa6325b897a47e221a7b48326d1a01e4c5835c319672e

  • SHA512

    76990f268136b688b80c83f43d4233777be679649e613cfc321602aeddc17f6161caf459a8208744ca8c09804a2722adff32243f2f71fef6699455bd847b147f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLoJYH5:1dWubF3n9S91BF3fbo8JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2