Extracted

• • Target

    789cee297204b7668b4e65bf79bd6b0cf453cec84fefca53f58045f2dfb68ea0

  • Size

    899KB

  • MD5

    6862755e7e1e472c83e49b8d123dfb70

  • SHA1

    50644947d0ac9a8af25ee914ba1c6142864a6558

  • SHA256

    789cee297204b7668b4e65bf79bd6b0cf453cec84fefca53f58045f2dfb68ea0

  • SHA512

    a2bb2256097f0ad82e86b90df30243f4a0e1c07f757aa80fb166e9d48a99366d1f4a0eec9acc87b971ffe320e504057ad9b6ce7229c8517f235f48b48484ce54

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXz:7wqd87Vz

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2