ThreatFox Database

Indicators of Compromise (IOCs) on ThreatFox are usually associated with certain tags. Every IOC can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of IOCs in the ThreatFox corpus. The page below gives you an overview on IOCs that are tagged with Gh0stRAT.

You can also get this data through the ThreatFox API.

Database Entry


Tag:Gh0stRAT
First seen:2021-08-06 14:00:46 UTC
Last seen:2024-12-21 13:15:29 UTC
Sightings:294

Indicators Of Compromise


The table below shows all indicators of compromise (IOCs) that are associated with this particulare tag (max 1000).

Date (UTC)IOCMalwareTagsReporter