Extracted

• • Target

    9e77507ee1bfeed28e0559312a1630efff27911da8edc0c37c5e2bde910ef45b

  • Size

    49KB

  • MD5

    a10fd340e7d4b952d79a7cc6d403ca2a

  • SHA1

    e20f574f7af240f0d0ea66a9539fb3bf4ca45785

  • SHA256

    9e77507ee1bfeed28e0559312a1630efff27911da8edc0c37c5e2bde910ef45b

  • SHA512

    7134648dd5933ac00aef16068e1ba236ddb5ab3ec695a5236c16114cd8559a30509c8abaccdb62bc59739ac3214350f20bdc4079200539d5cfce04ed697e285d

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJONJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJyJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2