Extracted

• • Target

    0ee1cb5435a8933ed6eca3c134766b84f507f759a07fb995cd4c7dfe37349b8f

  • Size

    899KB

  • MD5

    9f64ac744ecb2725a7e27bacfd32ce24

  • SHA1

    b65a10b36c00c455b3f412e9fe5fc77b246bdfb3

  • SHA256

    0ee1cb5435a8933ed6eca3c134766b84f507f759a07fb995cd4c7dfe37349b8f

  • SHA512

    12e1283c3ac844b49ae27f5a2d504cbdb79b72b1c9bf5de3c949af9046c9f1c2b53799b5115982c9cad3ac35c55a8db86fed7a69a445a2f3aa7d8f81bb460a0f

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2