Extracted

• • Target

    3eb4284686c0c47553fb1c06cba0a8117f00d249e25a9e6bbe792286004101a5

  • Size

    49KB

  • MD5

    06ff915356f698c3420541df7f8fff38

  • SHA1

    ec9e211fd56e1fd0127028d342500a90884c45cb

  • SHA256

    3eb4284686c0c47553fb1c06cba0a8117f00d249e25a9e6bbe792286004101a5

  • SHA512

    e612c83eeb85ef1cb4fe450820742d759e650c12989ca04c82bae6ae2f8a1345324a027f87ad35c8d77c586cb1e7c6a1847bf85ac189374c4021fb42d49c7ec6

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOmJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ1JYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2