Extracted

• • Target

    d620bb1a77e468f3e2a9a8ede8eaf721a9d8d0126bb382a0d937d62764f23d51

  • Size

    899KB

  • MD5

    6a16b232be8d8a51bb1b7fffc2f0297d

  • SHA1

    1a71de7ae254b17e2f9e9ecdf348b14806906a41

  • SHA256

    d620bb1a77e468f3e2a9a8ede8eaf721a9d8d0126bb382a0d937d62764f23d51

  • SHA512

    7d06b61d6e24f241ae86063ca901e71aadf87b943adafe648c5eb6fcd7f4bb822913cd7f34790d38a330198a3c55658bd217c7af9708e326cb8389f80b993871

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXw:7wqd87Vw

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2