Extracted

• • Target

    7fa79f36ab145b0d2c5fe468be53dfb1b9614f044d444e2b05092ab95a93fadd

  • Size

    51KB

  • MD5

    4eb5a767b27f9512e9871af3b84eb927

  • SHA1

    a2bf9405a622d789859f0967f9957a1e245e5197

  • SHA256

    7fa79f36ab145b0d2c5fe468be53dfb1b9614f044d444e2b05092ab95a93fadd

  • SHA512

    46f282568be1afbdced40ab1c084f0e0e96b64d69a96418dcd848a9932d6baca4fc1bccd99b25b8da828f91e91e830b348e137033068f3d715018b9dc8d24a5a

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL+iJYH5:1dWubF3n9S91BF3fboxJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2