Extracted

• • Target

    cd7ed6b613518fb375e81ee4430e7876d434fff6e23b27220fc64ec9037daf2a

  • Size

    49KB

  • MD5

    a8b20ad06d6bdf89e6a36b559dae80c1

  • SHA1

    70f6777e1cd9dcb15baddbd2fc4d30326da71eb0

  • SHA256

    cd7ed6b613518fb375e81ee4430e7876d434fff6e23b27220fc64ec9037daf2a

  • SHA512

    6675fab82852a7ee70cc25fa2cc847ab3b39bb9143b48042773a9c91b29d6771a3644de2bc529ba2dffc1abc4a39c8a3b89480e86327a3b5813530d75d30e080

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOxJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJuJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2