Extracted

• • Target

    28684d9732197081b4d155d4b1fcd9d2a46f2d47371535212b394fff3d74f388

  • Size

    899KB

  • MD5

    0716cd9d24062721d238e9f5480698f7

  • SHA1

    91611502c0db6a31c1e3094071e4d905850c9041

  • SHA256

    28684d9732197081b4d155d4b1fcd9d2a46f2d47371535212b394fff3d74f388

  • SHA512

    46f12ad13e390b5a754458d46b4054c8ceb7694629eba8db346db0d1c6af9e579e59fb0eab26c98dfafc3142fc6a401bdaa21f8f2619ab851b8d9ed10925ec3d

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXm:7wqd87Vm

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2