Extracted

• • Target

    f994778d2d564fbb88b2e5b721eb58eaa2d3ea7f815facb1330091385cfde48e

  • Size

    51KB

  • MD5

    aaabe58241589aa8fa216ffca890f632

  • SHA1

    939625baf8fec46913fb96395e1a52f487b0d6eb

  • SHA256

    f994778d2d564fbb88b2e5b721eb58eaa2d3ea7f815facb1330091385cfde48e

  • SHA512

    0541b78882ea7cd46b36f2402d1c1fe79c5028bf8a8490bc582f1c89d64d9feaa83f5f37893fb386414523c96d204a006bb710f4d0ab6df6d3423484abef2dc6

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLtJYH5:1dWubF3n9S91BF3fbopJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2