Extracted

• • Target

    58a57b8e732e27bf47d83246135bdb7824b4af0b8d8b8b8e0bf986bebee0cc64

  • Size

    899KB

  • MD5

    1ab443231f47d8bbb2ade1ca72554881

  • SHA1

    d7d8e6478d49f99ff425b1f0e83fcd055be7f14f

  • SHA256

    58a57b8e732e27bf47d83246135bdb7824b4af0b8d8b8b8e0bf986bebee0cc64

  • SHA512

    4a1daa7fa5a4f91b21fe9aa9c68e866515c3afae8b7109a8812b812a5bdb87cfbd3add88fcf280bfc9f32632e87bc2e2465725a17ad878876e30a01023eb467b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXu:7wqd87Vu

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2