Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 03:31:51 UTC
Home > List all groups > List all tools > List all groups using tool DarkCrystal RAT
 Tool: DarkCrystal RAT
Names
DarkCrystal RAT
DCRat
Category Malware
Type Backdoor, Reconnaissance, Info stealer, DDoS
Description
(Cyber Security News) DCRat is a full-featured backdoor that is written in .NET. With DCRat,
third-parties can develop plugins to extend the functionality of the tool further, which can be
completed by using a dedicated IDE called DCRat Studio, developed by affiliates.
The flexibility of DCRat’s modular architecture and custom plug-in framework makes it
exceptionally handy for use in a range of nefarious activities.
Information Malpedia Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool DarkCrystal RAT
Changed Name Country Observed
APT groups
 Sandworm Team, Iron Viking, Voodoo Bear 2009-Dec 2024
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a9631077-aa3b-4493-8ad4-c3b3668e1790
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a9631077-aa3b-4493-8ad4-c3b3668e1790
Page 1 of 1