Extracted

• • Target

    f5f620a49e20921558ea0757cbfe172c8517812e7eb469118e63e659db000dfa

  • Size

    51KB

  • MD5

    ce86c8fdd4488c201ec1739e5e085c77

  • SHA1

    84549a971253a49045c600fa4e73d0784cdab292

  • SHA256

    f5f620a49e20921558ea0757cbfe172c8517812e7eb469118e63e659db000dfa

  • SHA512

    52b1dc275f54facfe9e6c3330f854693516b0da11e6d4b7fdebbd5b909f4976a5eecaaa166b156b62f2e297a3afd5b6385796cfc71c8bd9991c6590c4caf7f8f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLIJYH5:1dWubF3n9S91BF3fbocJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2