StaryDobry

StaryDobry is a sophisticated multi-stage loader malware that spreads through trojanized game installers on torrent sites. It uses a complex infection chain involving DLL side-loading, AES encryption, and process injection to deploy XMRig cryptocurrency miners. The malware targets gaming computers with sufficient processing power for continuous mining operations and employs DNS over HTTPS (DoH) to hide C&C communications.