Extracted

• • Target

    9039552ae705a44a64037a1daa3cfc33c974e6642a339640469ee43a8d68fd35.exe

  • Size

    49KB

  • MD5

    18cab6c6cbe079a051726bad0e5e839f

  • SHA1

    1657cf4cbff1e3d36cf19b031682f8a5c699ed14

  • SHA256

    9039552ae705a44a64037a1daa3cfc33c974e6642a339640469ee43a8d68fd35

  • SHA512

    40258228a48d44b2e2a5ef2648428b355a26260037571af86f05fe3719356d7195ce5a57d46932e401f0208a837baad7ee47b167cce9e36d4eb3cd973a6670a0

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO2JYHB9ElHSI:Cn7zBjPp1H9ovoDa/gJRJYHBWZSI

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2