Extracted

• • Target

    ad618392f421edf68cb2bf4693d200cad3a0bc0dfb8685086bcc66ec5fefd0f9

  • Size

    51KB

  • MD5

    2e0dea472d8a9e001461d118ed900fe8

  • SHA1

    4866ff456c30589884769ac4db433c23e4a8eecd

  • SHA256

    ad618392f421edf68cb2bf4693d200cad3a0bc0dfb8685086bcc66ec5fefd0f9

  • SHA512

    f5fe83b61a434a8883a1b44a17b888475a8c6a8aa2d58f23125ebcdad45070293315d52a7c7b08562b3e0a29d2b6777b189ee19ba80f9082aabb0e4548210b4f

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL9JYH5:1dWubF3n9S91BF3fboxJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2