CrossRAT

S0235

Malware.View on attack.mitre.org

About this malware

CrossRAT is a cross platform RAT.

Techniques used5

Procedure examples5

TechniqueProcedure example
T1083
File and Directory Discovery

CrossRAT can list all files on a system.

T1113
Screen Capture

CrossRAT is capable of taking screen captures.

T1543.001
Launch Agent

CrossRAT creates a Launch Agent on macOS.

T1547.001
Registry Run Keys / Startup Folder

CrossRAT uses run keys for persistence on Windows.

T1547.013
XDG Autostart Entries

CrossRAT can use an XDG Autostart to establish persistence.

Groups that use it1

Campaigns0

None recorded.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.