Extracted

• • Target

    7337ce08f0914c789d3c6d96cdee288f4844cb077126e9daaad667daef3e8063.exe

  • Size

    49KB

  • MD5

    86f326e887807588f4c5901e2466afff

  • SHA1

    d3c4965b7758438cac1ed2b3e8a89c2cf56baf9b

  • SHA256

    7337ce08f0914c789d3c6d96cdee288f4844cb077126e9daaad667daef3e8063

  • SHA512

    f5cb5a9707e852a9a506fcbadea75f533c5aa5670a15be49f2d2a285401ee1454b1871b99fd9a24002fa5c2a8bd42550392a6fd55e596cfeed57fe3ccce0fffd

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOzJYHB9ElHSI:Cn7zBjPp1H9ovoDa/gJYJYHBWZSI

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2