The price for this backdoor starts at 500 RUB (less than 5 GBP/US$6) for a two-month subscription, and occasionally dips even lower during special promotions. Sold predominantly on Russian underground forums, DCRat is one of the cheapest commercial RATs we’ve ever come across. Notably, this threat appears to have been developed and maintained by a single person going by the pseudonyms of “boldenis44,” “crystalcoder,” and Кодер (“Coder”). In fact, this threat actor’s commercial RAT sells at a fraction of the standard price such tools command on Russian underground forums.ĭCRat (also known as DarkCrystal RAT) is a commercial Russian backdoor that was first released in 2018, before being redesigned and relaunched a year later. Unlike the well-funded, massive Russian threat groups crafting custom malware to attack universities, hospitals, small businesses and more, this remote access Trojan (RAT) appears to be the work of a lone actor, offering a surprisingly effective homemade tool for opening backdoors on a budget. In the murky underworld of Russian crimeware, DCRat seems to be a bit of a dark horse. The idea is to try and get them to load along with the binary/xbe/exe, so you can check out the function names.Update 05.27.22 : An unknown APT group is targeting Russian government entities with at least four separate spear-phishing campaigns since the beginning of the Ukraine conflict. Quite nice to do something else for a change, that takes you outside of your 'comfort' zone.ĮDIT #6: Looks like others were looking for a way to read the. With it I can now see this in 圆4dbg (32-bit version):

At the bottom of the page, there is a comment: CXBX-0.5.0 - XBE => EXE convertor.

xbe file is actually in Intel format? o_OĮDIT #5: So I was able to convert the. Is there any in that ISO? Cuz without it, you'll be swimming in the dark in that PowerPC code.ĮDIT #4: Oh, but wait. xex format, so IDA can load it up and you could work with it. So, someone with XBOX-reversing knowledge would need to convert the content to. So you'll need quite a lot of reverse-engineering knowledge, plus coding (not just C++, but the ability to look at ASM and envision the purpose of the function).ĮDIT #3: And the ISO is not Windows-compatible. IDA can help identify some functions and name them up, but the ability to do PPC-to-Intel is not something I've seen. you have the major issue: wanting to convert XBOX code to PC (PowerPC to Intel). As such, they had a release executable, a debug or development one and, at times, a test executable. I can help out, am a sucker for dev stuff Or debug builds.ĮDIT #1: Ah, one of the links points to the ISO.ĮDIT #2: If the idea is to get the menu from the XBOX version to PC or vice-versa, then know that for most of these old games, developers used to comment out code that shouldn't have made it in the release build. Be kind and upload what you have someplace and PM me the links.

Exe to xbe converter