Extracted

• • Target

    319e8df76e0676054b902a3b8cbfe7551fd5a5c580dcd74e3e2ffeeec523c95e

  • Size

    899KB

  • MD5

    aa0afe6471f3ab0e2455c546adee7694

  • SHA1

    4c48c355ecb371e98706f60c575ad4f9438c39f2

  • SHA256

    319e8df76e0676054b902a3b8cbfe7551fd5a5c580dcd74e3e2ffeeec523c95e

  • SHA512

    17618affbba4ee0f858672c6b1f7efd1d16980613b0a952d7d1c5a618a06497b187b38ff20abc4c757be40ec9c668d265c1c41be8ccd069b126e902c52f078ab

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2