Extracted

• • Target

    609213534ab00475fe2f1b880cf32db87fdf034ebc7bb7a4e7c66f9f2989a6e1

  • Size

    51KB

  • MD5

    f561e9a481cb57b1c24e38b917f0dc75

  • SHA1

    a53db34a178be072d977040fa946350b604da2b5

  • SHA256

    609213534ab00475fe2f1b880cf32db87fdf034ebc7bb7a4e7c66f9f2989a6e1

  • SHA512

    8d9fbde0fede96df333c16d05ec09a2a5e5186c8f9efd079a1c5343f8dbe2cbc963d3b9d4f818ed1e9656be217cae9da58fe6b9310aa06e6335c19003371bfae

  • SSDEEP

    1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoL3JYH5:1dWubF3n9S91BF3fboTJYH5

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2