Extracted

• • Target

    5c2b5dd8b8d6a2ad264406abe831f0e2dde4df75a134ad45145323f961fb0c58

  • Size

    49KB

  • MD5

    fcafda3961db4eb56650fbd9d2782c8e

  • SHA1

    10d7251c9eb8705831f797a8c630106d369888e3

  • SHA256

    5c2b5dd8b8d6a2ad264406abe831f0e2dde4df75a134ad45145323f961fb0c58

  • SHA512

    46b53c80cd805179e9be0a0d651be3d410ec5465131c7d6954ba01d25856db6427fb58a3c2e6ffcdae0744d0d2cbc05b4cb9de88cd1418f65abfff00a1024765

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOgJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJLJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2