ThaiCERT    ETDA    MDES
Report
Search
Home > List all groups > List all tools > List all groups using tool KHRAT

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link Tool: KHRAT

NamesKHRAT
CategoryMalware
TypeReconnaissance, Backdoor, Keylogger, Info stealer
Description(Palo Alto) KHRAT is a Trojan that registers victims using their infected machine’s username, system language and local IP address. KHRAT provides the threat actors typical RAT features and access to the victim system, including keylogging, screenshot capabilities, remote shell access and so on.
Information<https://unit42.paloaltonetworks.com/unit42-updated-khrat-malware-used-in-cambodia-attacks/>
<https://blogs.forcepoint.com/security-labs/trojanized-adobe-installer-used-install-dragonok%E2%80%99s-new-custom-backdoor>
Malpedia<https://malpedia.caad.fkie.fraunhofer.de/details/win.khrat>
AlienVault OTX<https://otx.alienvault.com/browse/pulses?q=tag:KHRAT>

Last change to this tool card: 14 May 2020

Download this tool card in JSON format

Previous: KGH_SPY
Next: Kikothac

All groups using tool KHRAT

ChangedNameCountryObserved

APT groups

XDragonOKChina2015-Jan 2017 
 RancorChina2017 

2 groups listed (2 APT, 0 other, 0 unknown)

Thailand Computer Emergency Response Team (ThaiCERT)
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1234
E-mail report@thaicert.or.th
PGP Download PGP key