Extracted

• • Target

    a2303a350d956a72b7a8ac74a5b1a31694965e95e534cd7d0724d4a4514d77ec

  • Size

    899KB

  • MD5

    a48c43fae155deeab447491be267c648

  • SHA1

    473e5ac9ce3bbb4936311b37f0f3d86b01ca30fa

  • SHA256

    a2303a350d956a72b7a8ac74a5b1a31694965e95e534cd7d0724d4a4514d77ec

  • SHA512

    2dcd0f317a007a9e11fc2590bc3e1e489fcdc8cff550143b4956b7b784d66c2f5dea6b89377deb16473fdf5dd4875b1de7410e190f362f7fd4f7d19761de08fc

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXA:7wqd87VA

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2