Extracted

• • Target

    c9bf9473830d029b203751c8beaf551bc6bbf3ba4d075a398b0d7061ac5d83bbN.exe

  • Size

    51KB

  • MD5

    0bc6134e512d9fe7e5951fad98054a80

  • SHA1

    ac85d8bf675fc46ec61810d00c7eb32e05461195

  • SHA256

    c9bf9473830d029b203751c8beaf551bc6bbf3ba4d075a398b0d7061ac5d83bb

  • SHA512

    a852107f8ef52b0db2be67475cb2321b7d3f89593559e99ce2457b811a2eaa805fa34f4aca504a7400c685ef0e81ec8370caaecd5a2c48d8219e6251157f2fad

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLYJYH5:1dWubF3n9S91BF3fboEJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2