Extracted

• • Target

    511b78778c6013683cdcc4fdc9d1d2ec79e9083f8a2bff73211b16ae6a47a117

  • Size

    899KB

  • MD5

    747ed26f228b683e713d5742bf594bc0

  • SHA1

    da0b1a4c368e0c1a24d526299240c34df358a98f

  • SHA256

    511b78778c6013683cdcc4fdc9d1d2ec79e9083f8a2bff73211b16ae6a47a117

  • SHA512

    c862c471fdcc561ed5d7fd3c8629a7862231ccc57d2cba7f30bf4f071551be0a8c59bf08152c033528b08339b365cc8b289244e0784123a59a4636473f3e6d37

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXC:7wqd87VC

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2