Extracted

• • Target

    e952aa06d20f342c071b5a97bed2742d8b3c981548d1abb1c3f1653639ac3eed

  • Size

    51KB

  • MD5

    28cf65373165e410912ab9a968a3be73

  • SHA1

    d183ecb6847f88f1c83ef8fb254c1bd4f69e3486

  • SHA256

    e952aa06d20f342c071b5a97bed2742d8b3c981548d1abb1c3f1653639ac3eed

  • SHA512

    8e5c5fba17fe950e54a7560331007811af30beb1e93b66bbbd16179d1a8d7aafb1923b430192dc02ff2ac1a195bc67426db004d9861cbf554358389cc2db6459

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fboeJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2