Extracted

• • Target

    5d5f79e19a191eda6c4c0ec482304e3642d36e7a965dc895fe306b4f3bce245c

  • Size

    51KB

  • MD5

    1d59e1a681137b15e0a8f5f4e2099773

  • SHA1

    44e49f4230317260e52afe81d0f5897b6511de9b

  • SHA256

    5d5f79e19a191eda6c4c0ec482304e3642d36e7a965dc895fe306b4f3bce245c

  • SHA512

    16fb8584ee65001cbbefde8f202e2f3a2e947efba80b0c8d593be893844f10dedfce227ba25b5930124108c63a66ccf7fb0c01229517872783539894c696de99

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLbJYH5:1dWubF3n9S91BF3fbovJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2