216.73.217.22

DCRAT

The MITRE Corporation · Published 04/05/2026 16:31 · Modified 04/05/2026 16:31

Essential information

Confidence
75/100
Published
04/05/2026 16:31
Modified
04/05/2026 16:31
Revoked
No
Author / Source
The MITRE Corporation
Related entities
4 attack patterns (mitre), 1 intrusion sets (apt)

Description

[DCRAT](https://attack.mitre.org/software/S9017) is a variant of the open-source [AsyncRAT](https://attack.mitre.org/software/S1087) developed in C# with additional capabilities such as patching Microsoft’s Antimalware Scan Interface (AMSI).(Citation: Zscaler BlindEagle DEC 2025)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references