Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:51:05 UTC Home > List all groups > List all tools > List all groups using tool TranslucentGh0st Tool: TranslucentGh0st Names TranslucentGh0st Category Malware Type Backdoor Description () A Variant of Gh0st RAT. The analysis and comparison of EtherealGh0st and TranslucentGh0st showed that TranslucentGh0st is the predecessor of the EtherealGh0st. The difference between these two is that TranslucentGh0st uses byte constants to determine the command to interpret. The c2 address is base64 encoded and encrypted with a byte-XOR with 0x28 and SUB 0xC. The port is hardcoded into the binary in plain. Information Last change to this tool card: 18 June 2024 Download this tool card in JSON format All groups using tool TranslucentGh0st Changed Name Country Observed APT groups   Unfading Sea Haze 2018   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c7fe67ce-9ef6-495a-9b4c-b5c7fb2e4c63 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=c7fe67ce-9ef6-495a-9b4c-b5c7fb2e4c63 Page 1 of 1