Extracted

• • Target

    ea61174e93222e892db799149cd539f0d2c02b20005f7c16c1c0019716762295

  • Size

    50KB

  • MD5

    87850bdd6c1c9233b92f9d6f1c53cca3

  • SHA1

    b3f57e9b8b892a310e6cf8f8ca6518e5b46830c5

  • SHA256

    ea61174e93222e892db799149cd539f0d2c02b20005f7c16c1c0019716762295

  • SHA512

    822de85b6b88a638e1ca39f8114967b9723e03d93d04a531c5ce951fa30b71b9d4a68e5d745de808d1a3764c3f26330cb889cb25f3919664775174cc335ba1f8

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5jJYH:W5ReWjTrW9rNPgYoBJYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2