Comprehensive remote management capabilities
Real-time screen capture and remote desktop control with mouse and keyboard input forwarding. High-performance frame streaming with optimized compression.
Complete file system navigation with upload, download, delete, and directory management. Browse drives and folders remotely with ease.
Monitor and manage running processes. View process details, kill, suspend, or resume processes remotely with full control.
Execute commands remotely through an interactive shell interface. Full command-line access with real-time output streaming.
HTTPS protocol support to blend with normal web traffic. Uses standard port 443 to avoid detection by security systems.
Built-in Tor proxy bridge support for anonymous communication. SOCKS5 gateway integration for enhanced privacy and security.
Persistent offline keylogging with local storage and persistence mechanisms. Tracks keystrokes independently of network connectivity, ensuring continuous monitoring even when disconnected. Data is securely stored and exfiltrated upon reconnection. Stealth operation with minimal footprint.
Dual-component system design
Native .Net
C/Assembly Native
Stub.exe $POST
Sends data & polls
HTTPS
Port 443
KingRat Server Response
C&C & data
Built with security and performance in mind
Enterprise-grade remote management
Despite packing extensive features including remote desktop, file management, process control, keylogging, and advanced anti-analysis capabilities, the client stub is only 20KB in size. Highly optimized codebase ensures maximum efficiency with minimal footprint, making it ideal for deployment scenarios where size and performance matter.
Stream desktop screens with optimized frame rates. Support for mouse and keyboard input forwarding with low latency. Adaptive quality based on network conditions.
Monitor client systems in real-time. View OS information, system resources, network status, and active processes. Comprehensive system visibility and control.
Complete data exfiltration of all commands and inputs sent to/from clients. All communication is logged with offline persistence mechanisms, ensuring no data loss during disconnections. Export comprehensive logs to PDF with a single click for detailed analysis, documentation, and audit trails of all client interactions.
Client implements sophisticated evasion techniques including fully resolved indirect syscalls to bypass API hooks, comprehensive Anti-VM detection to evade virtualized environments, Anti-sandbox mechanisms to detect analysis environments, and Anti-debugging protection to prevent reverse engineering attempts.
Complete file system access with upload, download, delete, and directory navigation. Preview file contents and manage remote file systems efficiently.
Full process management capabilities. View detailed process information, terminate, suspend, or resume processes remotely with administrative control.
Advanced keylogging system that operates independently of network connectivity. Features robust offline persistence mechanisms with local storage, ensuring continuous keystroke capture even during network disconnections. All logged data is securely stored and automatically exfiltrated upon reconnection, providing comprehensive activity tracking and analysis capabilities separate from command/input logging.
Full client support across all Windows versions
2001
2006
2009
2012
2013
2015
2021
Universal Compatibility • 20+ Years • 7 Major Versions