Extracted

• • Target

    a7b039b3d0d6aff50f00cdbc61c42b8c0f67ec43b71f0ef0a9dc0d53e982d329

  • Size

    51KB

  • MD5

    61f7ed26bade0b83ce2bc77cc81bd9a2

  • SHA1

    f3a5a1cf09accd73a6aa091dad405cfce38063cc

  • SHA256

    a7b039b3d0d6aff50f00cdbc61c42b8c0f67ec43b71f0ef0a9dc0d53e982d329

  • SHA512

    50cb1523ae76b81141d84a76875586b8d39bf96f6e0a7819000ba7c23e2221253461fa94e689ca03133c7588514c94acecca91e9c116d86f5201ee75837e7a57

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLFJYH5:1dWubF3n9S91BF3fbo5JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2