PyDCrypt

PyDCrypt is malware written in Python designed to deliver DCSrv. It has been used by Moses Staff since at least September 2021, with each sample tailored for its intended victim organization.

View graph Watch Export

Indicators tracked

Intelligence Reports10

10 intelligence reports available

Curated threat research and citations from CrowdStrike, Mandiant, Microsoft, and other sources — unlock with Premium.

Upgrade to Premium

Connections

12 relationships

T1047: Windows Management Instrumentation

source

T1033: System Owner/User Discovery

source

T1027.013: Encrypted/Encoded File

source

T1036.005: Match Legitimate Resource Name or Location

source

T1140: Deobfuscate/Decode Files or Information

source

T1049: System Network Connections Discovery

source

T1059.001: PowerShell

source

T1059.006: Python

source

T1059.003: Windows Command Shell

source

T1070.004: File Deletion

source

T1686: Disable or Modify System Firewall

source