Extracted

• • Target

    dc831195c9b2e30cd3effb887dfec2a91cdafe65f8f8092f5f86f66f238483c2

  • Size

    50KB

  • MD5

    9dbe2f7becbb1b64824d798caf0bf4f6

  • SHA1

    29f4684dda5af9209b056d6b21903e658d73875f

  • SHA256

    dc831195c9b2e30cd3effb887dfec2a91cdafe65f8f8092f5f86f66f238483c2

  • SHA512

    c52e29860000af31aa64c907c800466b9b35dbaa7782ae6445a8121be36031a3ae24bdde6f246b2537d4d599052d471ea94330d409925453cb6500bd7657428e

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5UJYH:W5ReWjTrW9rNPgYo2JYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2