Extracted

• • Target

    2d8a5b225080b4fffa87e5e97d8b849fe73de0b5ee7a207b369db7d64a4c462f

  • Size

    899KB

  • MD5

    f182fa43025271fd261270cbfad6f812

  • SHA1

    a1f1bd936a0981a1de704b3b485e7f68f7f84bbd

  • SHA256

    2d8a5b225080b4fffa87e5e97d8b849fe73de0b5ee7a207b369db7d64a4c462f

  • SHA512

    ad85267cdb45d17262d5e3921e9932aa7d1e19a90b43da75d8528a19111dfb2e94b4e02fbff8cf31beb988ddfb0a3ef5de9261732388501390d3dfc4d68895db

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXE:7wqd87VE

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2