DarkTortilla RAT stages harvested data to strEncodedData.txt file

Georgios Maragos@Gmarak

•updated Sep 8, 2026•1•0•6

Detects the creation of files named 'strEncodedData.txt' on the local file system. This naming convention is associated with the DarkTortilla RAT, which uses this specific file to stage encoded data prior to exfiltration or further processing.