Extracted

• • Target

    b7a579d95e8f8e1925271157547b7019279d08bdcea7dbcb676b9f5d5349bb49

  • Size

    49KB

  • MD5

    fc8d2058850a9f33568a0ad8fa49ec5c

  • SHA1

    a8efdff505692991ce5a12490801f93d4a0df936

  • SHA256

    b7a579d95e8f8e1925271157547b7019279d08bdcea7dbcb676b9f5d5349bb49

  • SHA512

    6a309ca76fc491b9dabd09fcbed094046b8388f1e540ea07c6417af97db3c7ba7f33eb66904eb3d6ff389341042659a294fad6e97b7942763d2c7a3ecc2fc909

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOEJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJ7JYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2