Extracted

• • Target

    9241e105e865a20403f4bce40600acec71b5d404ba7c3159bd7c0cc34ecfa0aa

  • Size

    51KB

  • MD5

    fd3f26a3aa6a141856cdd7bf504f8efd

  • SHA1

    2a552c2371f256fb55b54ebeb0967508c82a4024

  • SHA256

    9241e105e865a20403f4bce40600acec71b5d404ba7c3159bd7c0cc34ecfa0aa

  • SHA512

    4e252f5c0928c2af36786767b7e4001cd952ec617201d35e90ece82a6dd730c95f79dd2b9e2c7ab2c3f7f355589ba993d8ba118697514c46c6f9f4e28c56d6d3

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL/JYH5:1dWubF3n9S91BF3fbobJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2