Extracted

• • Target

    e4aa2e7ac4be97291fb0b63b9e441292307b51682d6f7801f8d43eb0ad9b0a1a

  • Size

    49KB

  • MD5

    68b5b7f2c35a2c4c7148f11138f7c780

  • SHA1

    87ab1b9ab0379b0713e0dbb12863bb6edc09aea7

  • SHA256

    e4aa2e7ac4be97291fb0b63b9e441292307b51682d6f7801f8d43eb0ad9b0a1a

  • SHA512

    e7cdbd06c9c30cdc88140128e15139e46201ed8b29b2d8a2b4a9e6e9cbbf7e167c86649c3a91456d3fbea30acdcb168d540bc2cf883fab8973f0590d40239af3

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOXJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJEJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2