Extracted

• • Target

    7d16781b420f03f04e3ec6c601b7aaacd47334f87388dbee2e1f0024130104c4N.exe

  • Size

    899KB

  • MD5

    aa1b1eedbec2456f03ad3784e0244140

  • SHA1

    afdbcf0708957ad5206d9802b0abf181e596bcd3

  • SHA256

    7d16781b420f03f04e3ec6c601b7aaacd47334f87388dbee2e1f0024130104c4

  • SHA512

    ab952d71a4e7e0d1c7091796b3689021c2f7917c1a634b69f2690728ceace5c1e616e248cd9ca6a2205a7318412f930a20b17fe6a6aed1a3541e7faffea77e9b

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX0:7wqd87V0

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2