Extracted

• • Target

    6ffe74e94ccebb8bf1b7860120c0f5d4adc541366fe6038c24b1ca2af3d09fe3

  • Size

    49KB

  • MD5

    ed7274316c6711cb7f5de8d5f9068b1a

  • SHA1

    d9eb5eb9b4e76994f574ecd74062cbfabcc50a5d

  • SHA256

    6ffe74e94ccebb8bf1b7860120c0f5d4adc541366fe6038c24b1ca2af3d09fe3

  • SHA512

    9e629c97cc7396f31b3d8da429a9fef7b3b2af2d8f95c58de5bcff8a3b928dc0d8aaf32822d149af3d0a0b978450b93063dc4fd039f249f8178b973e2950757a

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOvJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJcJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2