Extracted

• • Target

    030b5d8a7459a8384510d0fd29bd8e3156a5039698164bbb31e52b179a0ea187

  • Size

    899KB

  • MD5

    c654f4bfa496c02c1a68c5c8ff056a4c

  • SHA1

    38b72a33eaab9130e567303a12b4316417bb6bd0

  • SHA256

    030b5d8a7459a8384510d0fd29bd8e3156a5039698164bbb31e52b179a0ea187

  • SHA512

    32a0f64ca3d09f512060e3ad42ef2bb8b0b2c371a1af40ccba1335f8fd2e44179baf84c05a1a124721fd1640a869e1f8c71813fd4badccf2b09a5be315d5c61c

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXS:7wqd87VS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2