RAT
GodRAT
GodRAT shares a common origin with AwesomePuppet RAT, alongside Gh0st RAT code similarities.
GodRAT is a Windows rat operated by APT41.
Background
GodRAT traces back to the same lineage as AwesomePuppet RAT and exhibits code overlap with Gh0st RAT, and it is probably tied to Winnty APT operations. Decades-old implant codebases such as Gh0st RAT remain in active use, frequently customized and recompiled to hit a broad set of targets. Numerous actors have relied on these legacy implants over the years, and the emergence of GodRAT illustrates how a long-lived codebase like Gh0st RAT can persist within the threat landscape.
Source: Malpedia (Fraunhofer FKIE).