S0032WindowsmacOS

S0032gh0st RAT

Platforms
2
ATT&CK
14.1
References
5

Description

[gh0st RAT](https://attack.mitre.org/software/S0032) is a remote access tool (RAT). The source code is public and it has been used by multiple groups.(Citation: FireEye Hacking Team)(Citation: Arbor Musical Chairs Feb 2018)(Citation: Nccgroup Gh0st April 2018) Documented platforms: Windows, macOS. Catalogued in ATT&CK 14.1. 5 references curated.

Platforms· 2

WindowsmacOS

References

  1. https://attack.mitre.org/software/S0032
  2. https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html
  3. https://web.archive.org/web/20230115144216/http://www.novetta.com/wp-content/uploads/2014/11/Executive_Summary-Final_1.pdf
  4. https://research.nccgroup.com/2018/04/17/decoding-network-data-from-a-gh0st-rat-variant/
  5. https://www.arbornetworks.com/blog/asert/musical-chairs-playing-tetris/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
gh0st
Software
QuasarRAT
Software
BBSRAT
Software
GravityRAT
Software
UBoatRAT
Software
Revenge RAT
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.