Extracted

• • Target

    a802f950a17eaacf9a8b4e7c900cd5fb4020b48d12cc7b74c79da72ffc39e7fa

  • Size

    899KB

  • MD5

    a30954a225ee3a4b098b307fdbd753dc

  • SHA1

    cbe6a816aa83d1603378686ba00310e10ec86e90

  • SHA256

    a802f950a17eaacf9a8b4e7c900cd5fb4020b48d12cc7b74c79da72ffc39e7fa

  • SHA512

    305129daa1902133c1dec8b173fe16a4a33b35e89e2805cef01dd2fc5b7fa81956c0a94459f7eaf620601bb3ea4a42c2e2d7d2a42f4ab86513983fbc6a1bb011

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXX:7wqd87VX

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2