Extracted

• • Target

    4327688b1ea7a0913c7a4232b6e827b14786c8b24391221798e2e1fec30e06b2

  • Size

    51KB

  • MD5

    603fe4197e2aef75add5c7df87f7b08b

  • SHA1

    5fd987ed77ac6303db96470855781a9055b576e9

  • SHA256

    4327688b1ea7a0913c7a4232b6e827b14786c8b24391221798e2e1fec30e06b2

  • SHA512

    f03589b57ef660a3ece2519b1b71943e1d09161d3692c91e4c4db0f89fad389e01d9238259ae10095960cd95ff4a07ac3b64d501ef5e4f2c10cdbbac4f189b73

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLNJYH5:1dWubF3n9S91BF3fbo5JYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2