Extracted

• • Target

    7f9e00db34416dec28011159f7ccf608ca0dd9687004b238667c94994460c9d8

  • Size

    899KB

  • MD5

    c61211ef9ec11858f82aca93403a9c67

  • SHA1

    5e92a5bf2590ca9e0f41ae4d5e177c0c07f6c0d0

  • SHA256

    7f9e00db34416dec28011159f7ccf608ca0dd9687004b238667c94994460c9d8

  • SHA512

    9c52ab761e8fe6cd4c3495ac33d389b25a086d01656655a1fd61a25c02a8da1633b46a25a7a5df7e7a23117e4ff11ca077c8fc80e815a36f9deb470dea21f2ad

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX9:7wqd87V9

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2