Extracted

• • Target

    d190827e9b7e3fd33de841f7b653274c9a96013b51f39f4a888c594725cfe459

  • Size

    51KB

  • MD5

    ca256d124a26979ebebc1fd603eb072a

  • SHA1

    d983939814d3c6721fdfb4eed861d78f7a654619

  • SHA256

    d190827e9b7e3fd33de841f7b653274c9a96013b51f39f4a888c594725cfe459

  • SHA512

    d8d2b198e78bf84b429dec1b21d2fe9843845e83d99d95d429e247b121f090475a9f3a733e16f71b4cdf6b61e8cbb823f41ab2b9c001b942fb5a10f8b0ca12d0

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLmJYH5:1dWubF3n9S91BF3fboSJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2