Extracted

• • Target

    d232beaa0248a74a7fb0d20db8e43d21961138379d00461fb283960f995623bb

  • Size

    49KB

  • MD5

    9662a1ef33da165859dd710d6b519ac7

  • SHA1

    aa5d027dc07dbb9d7d57e1a4ee10bfbc35554a76

  • SHA256

    d232beaa0248a74a7fb0d20db8e43d21961138379d00461fb283960f995623bb

  • SHA512

    0821df6c9c6fd926af233d524d6706aebac9e1f0345394566fab782322f8a57a279f0bafc836359ed2289ef3e04cb8fcc74d3fb2f76a6c6f59cc0dbf693afdb1

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOIJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJnJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2