Extracted

• • Target

    405dc8cb8610d2538481e7efede7c8bd3796a7a7c885abfb8d0b15b9863597e0

  • Size

    49KB

  • MD5

    58f7a945e21820dd25de62cc100f3e11

  • SHA1

    6e32a58adeccfd5b2d8486a779b31db35e39c294

  • SHA256

    405dc8cb8610d2538481e7efede7c8bd3796a7a7c885abfb8d0b15b9863597e0

  • SHA512

    c76e733162cd934f858a56ab590a31623d686b94dbd530df659c81ff02ea627a056477bd93639e969c826bcf95f09b7f93414839d0771984a7a6991bf11d7e8f

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJODJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJoJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2