Indicator detail

    1216a457…f37f

    SHA-256Score 95ActiveCrossRAT

    Confirmed by 2 sourcesTracked for today

    First seen
    Last seen

    Tags

    • CrossRAT
    • payload
    • exe
    • RAT
    • RemcosRAT

    Source provenance

    Which feed reported this indicator, when, and with what confidence — plus the raw per-source tags.

    Sources that reported this indicator, with confidence and time range
    Tags
    abuse.ch ThreatFox92 %CrossRAT, payload
    abuse.ch MalwareBazaar95 %exe, RAT, RemcosRAT

    Back to indicator overview