Extracted

• • Target

    cf7e0c6d3eab160a0912d1d1d59c1ac8f2c22803366b16ee553d231b08ba485b

  • Size

    50KB

  • MD5

    ae3f16814b60355d98f0489c4c12d397

  • SHA1

    d3c0972ec37b893c0d5056bf0504f8e5b79c4df2

  • SHA256

    cf7e0c6d3eab160a0912d1d1d59c1ac8f2c22803366b16ee553d231b08ba485b

  • SHA512

    8f06127904f6ff6766dec9548e53ca9ba0c6910b4b1b05693999e2262b1f82531c87dbc15a630a1edafc357240b88581ec82ff23ca8e39afd1af00c889f43398

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5IJYH:W5ReWjTrW9rNPgYo6JYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2