Extracted

• • Target

    0cedd3f279e23a59777ab0f7effeed8f39126e467023bc88dcbadd9a9b0666ed.exe

  • Size

    51KB

  • MD5

    f859b1e7c6d6af9bfc0dafe51e229508

  • SHA1

    3404c99eb62d2301cc3238de634075949a48594e

  • SHA256

    0cedd3f279e23a59777ab0f7effeed8f39126e467023bc88dcbadd9a9b0666ed

  • SHA512

    f49c5e710ad63f16103cc6969f855fb03cc50b4393d40ee2262a401252a3f283b3b2d567248afeabfffe2f890083b35ad14608f8ab386975bab45775696ab208

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL4JYH5j:1dWubF3n9S91BF3fbo0JYH5j

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2