Extracted

• • Target

    9ece333e250e5ed6832e5747f3a9b8b397cecbdfad08c2a02dfaee6d9ef4b11f

  • Size

    51KB

  • MD5

    bf18835966b638735d620066ecb952cc

  • SHA1

    200995476d0c38a6a31257153f078f7704ae0d45

  • SHA256

    9ece333e250e5ed6832e5747f3a9b8b397cecbdfad08c2a02dfaee6d9ef4b11f

  • SHA512

    c4fbe79cf7a0e6ef4096b1b5c0794d33d822689ba038858a00477d28b646844d9236a02e39b5850024119b7c73c973615b72faab53f64270d213d4c8b931ea83

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLAJYH5:1dWubF3n9S91BF3fboEJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2