Extracted

• • Target

    c05399b0635ca8ffe2eee4b5d1976ea7c6a9fe897c3134f3df62e960b19ef86bN.exe

  • Size

    50KB

  • MD5

    84681aed05cc42b0aedeadbc8fee21f0

  • SHA1

    01ab9bdbb0446c6e7b7faa327a8ab1a391242469

  • SHA256

    c05399b0635ca8ffe2eee4b5d1976ea7c6a9fe897c3134f3df62e960b19ef86b

  • SHA512

    60b5a7b05652326b1b47f4f420aefb50e88c72f1fa45e6b35660bc9d6d2bba24b606fabe6740470306c939fc2fdda7c44f9a9e91e2ca323875cf3bce992cf1f5

  • SSDEEP

    1536:WD1N4TeeWMWfPbp2WTrW9L3JPPgJ+o5cJYH:W5ReWjTrW9rNPgYo6JYH

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2