Extracted

• • Target

    7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

  • Size

    49KB

  • MD5

    bb8bd1ba7439752e49760898a6196819

  • SHA1

    0ac0f61c3cb3642f107287059d7d8af59a72e948

  • SHA256

    7af9b11c8bc82a483cfa41e365070ea14d64c469ca5930d96292c98cbce5a2ab

  • SHA512

    3689e5ee4fffc91e577edebab0f953e2ac1c92b268d57aa7185d2a1fd9c65f2a4461e5f98fbeaff564ef1e3a61ccf570843a60256da8f69540e433464dae925f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOkJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJrJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2