Extracted

• • Target

    e65b6bb65e3a59bbec10a36e9b6ced0808f79571efb6b20463e26c895170046e

  • Size

    49KB

  • MD5

    2af284c9a528451b5b91a1ef539d3d70

  • SHA1

    0388e36b2b8712b20e4160efb4cde94ec1785913

  • SHA256

    e65b6bb65e3a59bbec10a36e9b6ced0808f79571efb6b20463e26c895170046e

  • SHA512

    8f6238565e4a976ebf508b4559349045922192121ba5205730c0beebd85d94ca4e4a689767f24f743a52815586f4e550a83322db75f8da6226581f42efe9f98b

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOOJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ1JYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2