Malware family

CrySome RAT

Profile source: Mallory

MITRE ATT&CK

CrySome RAT in ATT&CK

27 distinct techniques

Reporting

Research mentioning CrySome RAT

Jul 15

Security Online Info

CrySome RAT Spreads Through Freight Phishing Attack

Malware family CrySome RAT, a .NET remote access trojan ... LevelBlue’s MDR SOC caught a multi-stage attack that ended with the CrySome RAT.

Jul 6

Levelblue Spiderlabs

From Phishing to Persistence: A CrySome RAT Infection Chain Analysis

During a recent security alert, the LevelBlue MDR SOC successfully triaged and contained a structured, multi-stage infection chain designed to deliver the CrySome remote access trojan (RAT).

Apr 21

Gurucul Threat Research

CrySome RAT: Multi-Layered Userland Evasion and Post-Exploitation Framework | Community Portal | Gurucul

CrySome RAT represents a modular, userland-focused post-exploitation framework emphasizing persistence, evasion, and operator control(Keylogger, Credential harvesting, RDP, HVNC).