CrossRAT

CrossRAT is a cross platform RAT.

ID: S0235
Type: MALWARE
Platforms: Linux, Windows, macOS

Version: 1.0

Techniques Used

DomainIDNameUse
EnterpriseT1083File and Directory DiscoveryCrossRAT can list all files on a system.
EnterpriseT1159Launch AgentCrossRAT creates a Launch Agent on macOS.
EnterpriseT1060Registry Run Keys / Startup FolderCrossRAT uses run keys for persistence on Windows
EnterpriseT1113Screen CaptureCrossRAT is capable of taking screen captures.

Groups

Groups that use this software:

Dark Caracal