Extracted

• • Target

    5e993f8876b803236d3e08e0fb6d1991a13aad8eefb1b79924196f96e6f605e7

  • Size

    899KB

  • MD5

    c389b56fd307551fac725f45ffb996c2

  • SHA1

    800756b258f99660fa037b719dc378df6102b61e

  • SHA256

    5e993f8876b803236d3e08e0fb6d1991a13aad8eefb1b79924196f96e6f605e7

  • SHA512

    afd3b61b40db76404556f3bd1b8170dabf7532eea4f12d6eaa81ff3ada524d36eb54883d6c99b7256ba0cf555e3d4f25333c4b5006972638981a981a669492da

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PX+:7wqd87V+

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2