Skip to content
MalwareWiki

RAT

SectopRAT

aka 1xxbot · ArechClient

SectopRAT, aka ArechClient2, is a .NET RAT with numerous capabilities including multiple stealth functions.

SectopRAT, also known as 1xxbot, ArechClient, is a Windows rat.

Background

SectopRAT, also called ArechClient2, is a .NET RAT packed with features, among them a range of stealth functions. It can fingerprint victim machines, exfiltrate data such as browser and crypto-wallet contents, and spin up a hidden secondary desktop to manipulate browser sessions. It also includes various anti-VM and anti-emulator defenses.

Source: Malpedia (Fraunhofer FKIE).