ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Home > List all groups > List all tools > List all groups using tool Gh0st RAT

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: Gh0st RAT

NamesGh0st RAT
Ghost RAT
TypeReconnaissance, Backdoor, Keylogger, Info stealer
Description(Infosec Institute) Gh0st RAT (Remote Access Terminal) is a trojan “Remote Access Tool” used on Windows platforms, and has been used to hack into some of the most sensitive computer networks on Earth.

Below is a list of Gh0st RAT capabilities. Gh0st RAT can:

• Take full control of the remote screen on the infected bot.
• Provide real time as well as offline keystroke logging.
• Provide live feed of webcam, microphone of infected host.
• Download remote binaries on the infected remote host.
• Take control of remote shutdown and reboot of host.
• Disable infected computer remote pointer and keyboard input.
• Enter into shell of remote infected host with full control.
• Provide a list of all the active processes.
• Clear all existing SSDT of all existing hooks.
AlienVault OTX<>

Last change to this tool card: 26 April 2023

Download this tool card in JSON format

All groups using tool Gh0st RAT


APT groups

 Anchor Panda, APT 14China2012 
 APT 17, Deputy Dog, Elderwood, Sneaky PandaChina2009-Sep 2017 
 APT 18, Dynamite Panda, WekbyChina2009-May 2016 
 APT 31, Judgment Panda, ZirconiumChina2016-Apr 2022 
 APT 41China2012-Feb 2023X
 Axiom, Group 72China2008-2008/2014 
 Bronze Butler, Tick, RedBaldNight, Stalker PandaChina2006-Apr 2021X
 Dust StormChina2010 
 Earth BerberokaChina2022 
 Emissary Panda, APT 27, LuckyMouse, Bronze UnionChina2010-Aug 2023 HOT 
 GhostNet, Snooping DragonChina2009-2010X
 Kimsuky, Velvet ChollimaNorth Korea2012-Aug 2023 HOTX
 Lazarus Group, Hidden Cobra, Labyrinth ChollimaNorth Korea2007-Sep 2023 HOTX
 Leviathan, APT 40, TEMP.PeriscopeChina2013-Jul 2021X
 MikroceenChina2017-Mar 2021 
 Nitro, Covert GroveChina2011-Jul 2014 
 PittyTiger, Pitty PandaChina2011-2014 
 Roaming TigerChina2014-Aug 2015 
 Space PiratesChina2017-Sep 2022 
 Stone Panda, APT 10, menuPassChina2006-Feb 2022X
 TA459China2017-Apr 2022 
 Wicked Spider, APT 22China2018 

24 groups listed (24 APT, 0 other, 0 unknown)

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]