Extracted

• • Target

    bfd5abb85295befaa99f836cc8389bfc47ea286c5a5ffe732f137e52bbea1e18

  • Size

    50KB

  • MD5

    897d14cef93c563c5c8abcf471608efe

  • SHA1

    52250a7479325bd53c0d6fee611d1a121e746b17

  • SHA256

    bfd5abb85295befaa99f836cc8389bfc47ea286c5a5ffe732f137e52bbea1e18

  • SHA512

    b966d14f1ed362abe30b657aad160782886ad5d3705cca48d36b401a389187ce433a6ca2344c6a9bc91360d2f353887e9d3d3399f91b7944c00cef806121f3b5

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5GJYH:W5ReWjTrW9rNPgYo0JYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2