Extracted

• • Target

    de3126254848ee4970c0c53e7c2212a6289c0017a6fc85a548142f0421a63028

  • Size

    49KB

  • MD5

    e6ae91637c22984370d211531b5ca96b

  • SHA1

    c1bdff0bc17e4561c2fab862b95cffc008479da6

  • SHA256

    de3126254848ee4970c0c53e7c2212a6289c0017a6fc85a548142f0421a63028

  • SHA512

    3dec3d9b8737cfc2e92e2256392f0f51e89203f21c0c5ea08dd41cc886cbed413000ccf45d0042e905222508d90ee61dd0af986df74308145640ef807ddb7610

  • SSDEEP

    1536:CDwMsml26T5zBj+alf1H9jfbyqkY4ZvoDUb/gJOdJYHB9ElHS:Cn7zBjPp1H9ovoDa/gJiJYHBWZS

  Score

  10^/10

  gh0stratdiscoveryrat

  • Gh0st RAT payload

  • Gh0strat

    Gh0st RAT is a remote access tool (RAT) with its source code public and it has been used by multiple Chinese groups.

    ratgh0strat

  • Gh0strat family

    gh0strat
  behavioral1