Extracted

• • Target

    33c5f2c3bbf02b99655d4874cb57a5b7be5ff07d9897ca5bbf17e9fcc466a066

  • Size

    49KB

  • MD5

    cc6c8577188ea546535586c3f126b224

  • SHA1

    626f90c414f352c55942e6598228a9b56ea5abdd

  • SHA256

    33c5f2c3bbf02b99655d4874cb57a5b7be5ff07d9897ca5bbf17e9fcc466a066

  • SHA512

    702817c3f83080296ac680ec6d3b43fe7bd41e7d2332ed1c3e573264c8e186b89a0b78837eba501c0557fb6639cba5c2a9e426cd1f95e413099af21f47ed455a

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOVJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJmJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2