Extracted

• • Target

    d359e7a2b0b5becd0c8394ed80b447bc44247d677074c9cc0c69cdede49e679f

  • Size

    51KB

  • MD5

    f906ad4580fdb476040a81f60b9abed0

  • SHA1

    9c3c596b95f1d681d63f637a421e801ff1975376

  • SHA256

    d359e7a2b0b5becd0c8394ed80b447bc44247d677074c9cc0c69cdede49e679f

  • SHA512

    c40ffbc8a6feee1a4532b85d6baae7dce660f226f989443522e6c00323bb58c4430dc6ce3e47b993de9dc750f0b49f4093478cc31c9561e1d3cfd09cb51ca2e3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLrJYH5:1dWubF3n9S91BF3fbonJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2