Extracted

• • Target

    f6bc53f0409054a7ac8a5f6f501e107c07eb874275362e1eeb5b385df574f439

  • Size

    899KB

  • MD5

    1c964c9713292c971c2cbdf1b50e9914

  • SHA1

    1d1ba59b8f5ecc3bd604a95b94ded69be9d3fe01

  • SHA256

    f6bc53f0409054a7ac8a5f6f501e107c07eb874275362e1eeb5b385df574f439

  • SHA512

    b579882efccc0396f7234f055c2979e7e7bfbee08f8fd4575eb5f308dd0b267d5e7798e7a0dfbca288a2abd8e58ecd55de8452d500c248844fbe612721b3a149

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2