DCSrv
- ID
- S1033
- Type
- Malware
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 11 Apr 2024
DCSrv is destructive malware that has been used by Moses Staff since at least September 2021. Though DCSrv has ransomware-like capabilities, Moses Staff does not demand ransom or offer a decryption key.[1]
Techniques used (8)
- T1027.013 Encrypted/Encoded File
- T1036.004 Masquerade Task or Service
- T1106 Native API
- T1112 Modify Registry
- T1124 System Time Discovery
- T1486 Data Encrypted for Impact
- T1529 System Shutdown/Reboot
- T1543.003 Windows Service