Extracted

• • Target

    834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

  • Size

    51KB

  • MD5

    44ea1e665ded6c4ea7c121a5686cf114

  • SHA1

    86403c32d11afdb10ceed17cf1a92f5fe6f83b4f

  • SHA256

    834fa17bb2a9fc987cf3bbea61cb8c1a8c0ed6d26f7bc6aac6187069022228cd

  • SHA512

    c0e0036ffba3042fc7c077eb73a132820234b0d652c22f786b8e4ce261b733bb6ab607b4528bbf7b8a5fbbd6f2c0a3a4503133c2c30ae8297c0f205a16a9c68d

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLCJYH5:1dWubF3n9S91BF3fbomJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2