S1032 PyDCrypt

malwareEnterprise

platformsWindows

also known asPyDCrypt

PyDCrypt is malware written in Python designed to deliver DCSrv. It has been used by Moses Staff since at least September 2021, with each sample tailored for its intended victim organization.

techniques used (11)

ATT&CK techniques this enables or maps to.

T1027.013Encrypted/Encoded File
T1033System Owner/User Discovery
T1036.005Match Legitimate Resource Name or Location
T1047Windows Management Instrumentation
T1049System Network Connections Discovery
T1059.001PowerShell
T1059.003Windows Command Shell
T1059.006Python
T1070.004File Deletion
T1140Deobfuscate/Decode Files or Information
T1686Disable or Modify System Firewall

used by groups (1)

Threat groups associated with this.

G1009Moses Staff

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan