MITRE ATT&CKsoftware (tool)

S9017 DCRAT

Published 2026-04-16 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2026-04-16

Description

DCRAT is a variant of the open-source AsyncRAT developed in C# with additional capabilities such as patching Microsoft’s Antimalware Scan Interface (AMSI).

Related

Uses · MITRE ATT&CK (4)

  • T1685 Disable or Modify Tools technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1573.002 Asymmetric Cryptography sub-technique
  • T1056.001 Keylogging sub-technique

Referenced by MITRE ATT&CK · uses (1)

References