Extracted

• • Target

    8685a630de230221c0fd1505e94deea0507d0a2b1e3db3d99939ca2c3412ad3e

  • Size

    51KB

  • MD5

    c8f5bf1223277bca96c7bc0431728e8f

  • SHA1

    4113d7546e3de222eea3bfc809eedc08ac92eca6

  • SHA256

    8685a630de230221c0fd1505e94deea0507d0a2b1e3db3d99939ca2c3412ad3e

  • SHA512

    e9f2204f3af08dd8fc9521218bcd7810fe24cdb8ecb0c5b115ff64a3bbd12b31f5b75297ae132c35bffc2cd39376105831333b4ee4e46a8c6b3ec2fcfb3b9dc9

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fboZJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2