Software: gh0st

From enterprise
Jump to: navigation, search
gh0st
Software
ID S0032
Aliases gh0st
Type Malware
Platform Windows, macOS

gh0st is a remote access tool (RAT). The source code is public and it has been used by many groups.1

Techniques Used

  • Rundll32 - A gh0st variant has used rundll32 for execution.3

Groups

The following groups use this software: