DCRAT
- ID
- S9017
- Type
- Tool
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 12 May 2026
DCRAT is a variant of the open-source AsyncRAT developed in C# with additional capabilities such as patching Microsoft’s Antimalware Scan Interface (AMSI).[1]
Techniques used (4)
- T1027.013 Encrypted/Encoded File
- T1056.001 Keylogging
- T1573.002 Asymmetric Cryptography
- T1685 Disable or Modify Tools