Extracted

• • Target

    eb0a4ae62beb4296d232117364d45f8ee6309105b21b9e6e3abfccbd7354cf6d

  • Size

    51KB

  • MD5

    4aafc76fc7d91fd989b003906575609d

  • SHA1

    9a6605ab73557020e1d0cb44e1faffe6ff12a0f7

  • SHA256

    eb0a4ae62beb4296d232117364d45f8ee6309105b21b9e6e3abfccbd7354cf6d

  • SHA512

    4e975d661f96d861a6abea57f15edf1dffc402f461de0be62cae35e724a171a047984444373342e7af2c20537f62a90fee04d97a5f42c54fa3257bb54e74c977

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fboRJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2