Extracted

• • Target

    8d50fb6038c692bee2e6ada2b699e5d79f5732c04e8ee4cca925a3350ce0a3f0

  • Size

    49KB

  • MD5

    fa9f90699e786307cd36b6daedfbcafb

  • SHA1

    048293cf90df6ae0d43e7fa85c69337676fc7c6d

  • SHA256

    8d50fb6038c692bee2e6ada2b699e5d79f5732c04e8ee4cca925a3350ce0a3f0

  • SHA512

    260970124f38852fe4c62b4108ac4f5da46113361f5c2dee4385cd80b81701ea8e4cce60c0cc0af7c7ce887c43a600ddf287ba753530c20df9c640ca21d9af1f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOSJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ5JYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2