Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 19:43:14 UTC
Home > List all groups > List all tools > List all groups using tool KHRAT
 Tool: KHRAT
Names KHRAT
Category Malware
Type Reconnaissance, Backdoor, Keylogger, Info stealer
Description
(Palo Alto) KHRAT is a Trojan that registers victims using their infected machine’s
username, system language and local IP address. KHRAT provides the threat actors
typical RAT features and access to the victim system, including keylogging, screenshot
capabilities, remote shell access and so on.
Information
Malpedia AlienVault OTX Last change to this tool card: 14 May 2020
Download this tool card in JSON format
All groups using tool KHRAT
Changed Name Country Observed
APT groups
 DragonOK 2015-Jan 2017
 Rancor 2017
2 groups listed (2 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=550bfaa7-7fce-4967-b03e-a1e14dddba03
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=550bfaa7-7fce-4967-b03e-a1e14dddba03
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=550bfaa7-7fce-4967-b03e-a1e14dddba03
Page 2 of 2

 DragonOK Rancor 2015-Jan 2017 2017  
2 groups listed (2 APT, 0 other, 0 unknown) 
   Page 1 of 2