Extracted

• • Target

    5c834e894a1a1b8f160fa3c841c6d339c0fbbea60661021df932c9c9e38b5435

  • Size

    51KB

  • MD5

    2667674a17fde877dc8049dceb46d147

  • SHA1

    aa5bd7c61021a01da8afdb4299cae000f127c1a3

  • SHA256

    5c834e894a1a1b8f160fa3c841c6d339c0fbbea60661021df932c9c9e38b5435

  • SHA512

    55dcaaa0200c224e0b59fac49ad5cfa96cc5a8e554408d288b67e6145ab35cedd45d90397a9912650cd8fba6a1618f826136ce896fab532c8d4309f1599403d3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLVJYH5:1dWubF3n9S91BF3fboZJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2