Extracted

• • Target

    5d92bcc71dc09396a31258ebe088e8c07f9ce1422d4674af0dec191b66fc9d23

  • Size

    49KB

  • MD5

    56e6b122c42fe2aa3ea9eb63e9631f53

  • SHA1

    7dfb56ebc5289da724049bd851933eedd4fa9135

  • SHA256

    5d92bcc71dc09396a31258ebe088e8c07f9ce1422d4674af0dec191b66fc9d23

  • SHA512

    33053a5650a47788c60989acff3949965e25ce45b0e68ef0ba044740e27486d6a6993ebbb12baafe1c27eedd994dafa6887b42dc658366de5bbbd3927922be32

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOpJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJCJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2