SynkLoader StreamMaster VNC C2 Domain Resolution (aroclenetapp.net)

Emiliano Mema@Nosalva

•updated Aug 28, 2026•0•0•1

Detects DNS resolution and outbound network connection attempts to the hardcoded C2 domain 'aroclenetapp.net' associated with the SynkLoader StreamMaster reverse VNC module. This module is used to exfiltrate screenshots and capture keyboard/mouse input.