DCRAT

MITRE
Malware Type:
Tool
First seen:
Unknown
Last seen:
Unknown
Details:

[DCRAT](https://attack.mitre.org/software/S9017) is a variant of the open-source [AsyncRAT](https://attack.mitre.org/software/S1087) developed in C# with additional capabilities such as patching Microsoft’s Antimalware Scan Interface (AMSI).(Citation: Zscaler BlindEagle DEC 2025)

Associated Techniques (4)
ID ATT&CK Tactics
T1027.013 Encrypted/Encoded File -
T1056.001 Keylogging -
T1573.002 Asymmetric Cryptography -
T1685 Disable or Modify Tools -
Used by Actors (1)
Metadata
ID: 164813
Created: 28/04/2026 16:00
Updated: 10/05/2026 04:00