Extracted

• • Target

    620560e68ca01400ea684af4a9c9c81078a654380dac3cd641522b059e2a8902

  • Size

    899KB

  • MD5

    4f0eb96dc7a094c29ea2186ab5a0abd5

  • SHA1

    793005750ea8d88c18b353642d66090e253b64fc

  • SHA256

    620560e68ca01400ea684af4a9c9c81078a654380dac3cd641522b059e2a8902

  • SHA512

    e85ee5fe8ffeb4a477335c059cc319c06ccef4799bdd909ed9b57605093c72b53c9ae63f8df0c69db09ad511b30c04bf6f3b92fcf6c2442fc1cb8ac308f15781

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXQ:7wqd87VQ

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2