Campaigns / Malware / Family

CrossRAT

CrossRAT is a cross platform RAT.

0New IOCs · 24h
27New IOCs · 7 days
27Indicators tracked
1Independent feeds
2026-10-10 21:08Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

  • Hash27
  • Malware27

MITRE ATT&CK lists this as malware CrossRAT. Explore the ATT&CK matrix →

Where its infrastructure is hosted

No location data.

Latest indicators

Filter the live feed →
First seenTypeIndicatorRoleWhere
2026-10-10 21:08MD52c252bc8ecf99d3659df65af554c0c4dpayload—
2026-10-10 21:08SHA1c9acfe5840c11b540ae2c1959e68d68c880c7d28payload—
2026-10-10 21:08SHA25611862191bdcfc8bb03d5e7e1f72a1db133eaaca9344916a6c79c3517f7aba06dpayload—
2026-10-10 21:08SHA183bd590fbc2fa412433e6bd76fee16b379ac6557payload—
2026-10-10 21:08MD556e705cf656cce54945c7941442a6624payload—
2026-10-10 21:08SHA25677415566cdc9a0f0d16347961f5eacca934a73cb4e00c834b782962e9de8d417payload—
2026-10-09 15:45SHA10f772ab2d5e02b7aef59bd70dc438f56e36e01e9payload—
2026-10-09 15:45MD50ab63fac1e124db0dbaea7d0c8d2d609payload—
2026-10-09 15:45SHA1db743e8316d8ad925409c8806c5f256971752f18payload—
2026-10-09 15:45MD50f8db1428213838c9d104f5369835969payload—
2026-10-09 15:45SHA256b0915fda8b68cc59f8c722080d133e823e9ae49bb3ad82d1f4faca1f14325284payload—
2026-10-09 15:45SHA256492ac6489b05326e2fc2939af9ca842cb4f20dd708a4891e22e52ec6d268fdf7payload—
2026-10-09 15:45MD540fb3059353fda2a810e736ed8888ad5payload—
2026-10-09 15:45SHA256ef41e4af8abb91a0c77f60005bd985ff554fe368593bb0b60d09a5fc9a54bd98payload—
2026-10-09 15:45SHA10a8c1c0632b383564e056ac6ce279de9381bfe26payload—
2026-10-09 15:45MD59e848a4af00c33c6b7f6dbe7dc06ed35payload—
2026-10-09 15:45SHA256b1226cf111753eb82f329cb657104059ac96c8692853d83aa4a70d9b8c2bb312payload—
2026-10-09 15:45SHA19272479dcddd3aa9a9c78b1d1accb06d273e379fpayload—
2026-10-06 19:25SHA16888baa9ec4188a3a11cf18a394e69e504743aa9payload—
2026-10-06 19:25MD5a4704f0e3a3ca3efc1078af02105d30fpayload—
2026-10-06 19:25SHA256034174f5266a4276cf29cfdb23fc3fa52699438ff60c8055b7df12c88341a49bpayload—
2026-10-06 19:24SHA1eb71f02fb2de58cb0b68a868d06213620feb98c7payload—
2026-10-06 19:24MD5bfc0848e67feb2b80c7bf5ba9c1efe27payload—
2026-10-06 19:24SHA1bc2745c026a8d0efe3849978221dccb0bb3906dbpayload—
2026-10-06 19:24MD51ad3729976f26d9d7ea44e2a7195b572payload—
2026-10-06 19:24SHA2562b0ca329e37f6cf14c33735d1c0d2e85d47354b9839798bfef7beb19df664975payload—
2026-10-06 19:24SHA2560693e042dd629efb54a385e8fee6cd00c7a54543d31bceb3f790365a72e55448payload—

Defanged for safety. URL query strings removed.