Dacls RAT - Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 18:08:15 UTC
Home > List all groups > List all tools > List all groups using tool Dacls RAT
 Tool: Dacls RAT
Names
Dacls RAT
Dacls
Category Malware
Type Backdoor
Description
(Qihoo 360) Dacls is a new type of remote-control software targeting both Windows and
Linux environment. Its functions are modular, the C2 protocol uses TLS and RC4 double-layer encryption, the configuration file uses AES encryption and supports C2 instruction
dynamic update. The Win32.Dacls plug-in module is dynamically loaded through a
remote URL, and the Linux version of the plug-in is compiled directly in the Bot
program.
Information
Malpedia
AlienVault OTX Last change to this tool card: 29 December 2022
Download this tool card in JSON format
All groups using tool Dacls RAT
Changed Name Country Observed
APT groups
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ece6a72a-df67-40cb-8f1a-17bb6fee43cc
Page 1 of 2

Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ece6a72a-df67-40cb-8f1a-17bb6fee43cc
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=ece6a72a-df67-40cb-8f1a-17bb6fee43cc
Page 2 of 2