Extracted

• • Target

    9eeb29f82796e82a7a8a4e49a4db216f9b19b6802edbf28bc0d2bf6742ba2e60

  • Size

    51KB

  • MD5

    a91975c06e45169626ecc72019d899c1

  • SHA1

    dc0d68081dd4e470ae21c175f74d3d0d29e8d653

  • SHA256

    9eeb29f82796e82a7a8a4e49a4db216f9b19b6802edbf28bc0d2bf6742ba2e60

  • SHA512

    e4f156f4a158999659f69884bb43e5e0e5cc58f179a23874857f37d3477011a2139527c663c1707d2626882b2d932bfb9579b1d1fb3b1098c354c5ed57892540

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLmJYH5:1dWubF3n9S91BF3fboyJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2