Actor
The DCRat malware uses the Windows time synchronization utility 'w32tm.exe' to introduce arbitrary delays in its execution flow, helping the threat actor evade sandbox analysis and automated detection mechanisms.