Analyzing Dark Crystal RAT, a C# Backdoor | Mandiant

Malware
DotDumper: Automatically Unpacking DotNet based Malware
The automatic detection and classification of any given file in a reliable manner is often considered the holy grail of malware analysis. This blog will dive into DotDumper’s usage and internals.
GitHub - advanced-threat-research/DotDumper: An automatic unpacker and logger for DotNet Framework targeting files
An automatic unpacker and logger for DotNet Framework targeting files - GitHub - advanced-threat-research/DotDumper: An automatic unpacker and logger for DotNet Framework targeting files
A .NET rat target Mongolia
A new document royal road v7 installs a backdoor in .NET. a first executable is dropped \os03C2.tmp. This exe has many similarities with…