Extracted

• • Target

    4594a943b879ecacf17f13ae501137e84bcc517a903961e8b0c3d870fa927e3b

  • Size

    899KB

  • MD5

    61d82fccb88d7e7b7d1187d85636eab5

  • SHA1

    58c1fd9e60717fb17c9b6861dd1c3ba8cf5631c3

  • SHA256

    4594a943b879ecacf17f13ae501137e84bcc517a903961e8b0c3d870fa927e3b

  • SHA512

    fe1b64778127e69d9f8b0355ed48c7f4a28c2c2d3dd7084fd2b66cac3e427577381d2d231025cfb65c3eca861964f2b90a8f40701743669ee34580371dd2a311

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXn:7wqd87Vn

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2