DcRat v1.0.7

DcRat is a remote access Trojan (RAT) identified primarily in association with the RedFoxtrot threat group. DcRat is designed to allow attackers to remotely take control of infected systems and is typically used for data theft, surveillance, and the deployment of additional malware. The malware infrastructure has targeted critical industries, including telecommunications and finance. Certificates associated with DcRat often include the distinguished name "DcRat Server" from an entity named "qwqdanchun," indicating a consistent source of malware distribution. RedFoxtrot uses multiple methods and tools with DcRat, including Cobalt Strike and AsyncRAT, for infiltration and command and control activities. Initial access methods typically involve social engineering tactics or exploiting vulnerabilities to compromise target systems.

Features TCP connection with certificate verification, stable and secure. Server IP port archived via a link. Multi-server and multi-port support. DLL-based plugin system, offering great scalability. Ultra-compact client size (approximately 40-50 KB). Data transformation with msgpack (better than JSON and other formats). Logging system recording all events.

Features Remote Execution Remote Desktop Remote Camera Registry Editor File Management Process Management Netstat Remote Recording Process Notification File Send File Injection Download and Execute Send Notification Chat Open Website Change Wallpaper Keylogger File Search DDOS Ransomware Disable Windows Defender Disable UAC Password Recovery Open CD Screen Lock Client Shutdown/Restart/Upgrade/Uninstall System Shutdown/Restart/Logoff UAC Bypass Get Computer Information Thumbnails Auto Task Mutex Process Protection Block Client Install with schtasks etc. Support The following systems (32 and 64 bit) are supported: Windows XP SP3 Windows Server 2003 Windows Vista Windows Server 2008 Windows 7 Windows Server 2012 Windows 8/8.1 Windows 10 TODO Password recovery and other stealers (only Chrome and Edge are currently supported) Reverse proxy Hidden VNC Hidden RDP Hidden browser Client map Real-time microphone Fun features Information gathering (possibly with UI) Unicode support in remote shell Folder upload support Multiple client installation methods are available.