DFKRAT

DFKRAT is a sophisticated backdoor malware associated with the NGC2180 threat group, designed for cyberespionage targeting high-ranking entities. It uses multi-stage delivery mechanisms including DLL side-loading and shellcode injection, employs RC4 encryption for C&C communication, and supports interactive shell, file exfiltration, and potential additional malware download capabilities.