Extracted

• • Target

    3cf5bc57c97968f93ac8e64cbaffd7908837c3292f30b4b44617a4a3c51909d7

  • Size

    49KB

  • MD5

    3ecbf8020c7f75c2b02542e534daf26d

  • SHA1

    db52655acc2d000e095ac4427012c2fdfbc66199

  • SHA256

    3cf5bc57c97968f93ac8e64cbaffd7908837c3292f30b4b44617a4a3c51909d7

  • SHA512

    b8aea4cfb02f48047201dbc88bb02e8967a4de68af5b532dff430ff56875f5936d947f0c37189219493b46f2547199aaac5c1ee3b03061b070bafa1e1c54495f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJO5JYHB9ElHS:Cn7zBjPp1H9ovoDa/gJqJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2