General

  • Target

    https://github.com/ramrk23/Roblox-Stealer/releases/download/v3.0.9/Roblox-Stealer_v3.0.9.zip

  • Sample

    250327-bcrg1sxpt7

Malware Config

Targets

    • Target

      https://github.com/ramrk23/Roblox-Stealer/releases/download/v3.0.9/Roblox-Stealer_v3.0.9.zip

    • DcRat

      DarkCrystal(DC) is a new .NET RAT active since June 2019 capable of loading additional plugins.

    • Dcrat family

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks