Extracted

• • Target

    cbacf88df5bee3f41ff5fc51326d772b39cb4f82130b7cb4c15a4028146115da

  • Size

    49KB

  • MD5

    1d51e653e7281293f1425d62fc6bab56

  • SHA1

    f3f70708a12cf07ab7f68ef8eb6cb0533e33fb7e

  • SHA256

    cbacf88df5bee3f41ff5fc51326d772b39cb4f82130b7cb4c15a4028146115da

  • SHA512

    dbdf87baa97de01d887e7ccc69921ecedad5451289ec039d9e4fe9684f86aca0cada997187fc9aea2e4294e594970a0471f54ee512e3be0978ce714f867373f0

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOKJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJtJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2