Extracted

• • Target

    88fa5bf15ec22637ac7fe43033f69fd0064642398cb014d3875e0add41bc8f27

  • Size

    49KB

  • MD5

    29118f306e8040ab64d098e1200e9d73

  • SHA1

    db2978b70105df574b72a1a395e910bcea03899a

  • SHA256

    88fa5bf15ec22637ac7fe43033f69fd0064642398cb014d3875e0add41bc8f27

  • SHA512

    98d5e0fd66b6805ba167208e5e9093dd5a8b025b345b53702dc79e7cbff127ae061b1e0dfbe39c71947c0c4c7598d6b9fef5bed4cbd4d22ddb931c88fae56288

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOsJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJLJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1behavioral2