Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 18:57:26 UTC Home > List all groups > List all tools > List all groups using tool MagicRAT Tool: MagicRAT Names MagicRAT Category Malware Type Backdoor Description (Talos) MagicRAT is programmed in C++ programming language and uses the Qt Framework by statically linking it to the RAT on 32- and 64-bit versions. The Qt Framework is a programming library for developing graphical user interfaces, of which this RAT has none. Talos believes that the objective was to increase the complexity of the code, thus making human analysis harder. On the other hand, since there are very few examples (if any) of malware programmed with Qt Framework, this also makes machine learning and heuristic analysis detection less reliable. Information MITRE ATT&CK Malpedia Last change to this tool card: 28 June 2025 Download this tool card in JSON format All groups using tool MagicRAT Changed Name Country Observed APT groups   Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025 1 group listed (1 APT, 0 other, 0 unknown) https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8894b29c-bd50-4b79-a549-6b2fd2d5d93b Page 1 of 2 Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8894b29c-bd50-4b79-a549-6b2fd2d5d93b https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8894b29c-bd50-4b79-a549-6b2fd2d5d93b Page 2 of 2 APT groups Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025 1 group listed (1 APT, 0 other, 0 unknown) Page 1 of 2