Extracted

• • Target

    d3ca5383292aae2a7354d798c390e1328a91b21f1388d4a59c90e98f8e99e309

  • Size

    51KB

  • MD5

    9dd890416dc848959b4a1eab1352182f

  • SHA1

    30283e5d9f6137b01d7dd74f001e5d8b47dd04d4

  • SHA256

    d3ca5383292aae2a7354d798c390e1328a91b21f1388d4a59c90e98f8e99e309

  • SHA512

    fca73cdd5079a668aef6ff024b70fcfa49c6e2cb8e49a7e58439bd74795fc869e66d3b4b0afc35e65cd0308ad5adb86a80c68f0b97baf21b946079d982c8c3db

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLPJYH5:1dWubF3n9S91BF3fbo7JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2