Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:36:42 UTC
Home > List all groups > List all tools > List all groups using tool DCSrv
 Tool: DCSrv
Names
DCSrv
DCrSrv
Category Malware
Type Wiper
Description
(Check Point) This malicious process masquerades as a legitimate svchost.exe process
and has a single purpose: to encrypt all computer volumes, and deny any access to the
computer.
Information MITRE ATT&CK Malpedia Last change to this tool card: 30 December 2022
Download this tool card in JSON format
All groups using tool DCSrv
Changed Name Country Observed
Other groups
 Moses Staff 2021-Nov 2022
1 group listed (0 APT, 1 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=91285738-3e28-4a2a-bd62-aff3d1d9b9b7
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=91285738-3e28-4a2a-bd62-aff3d1d9b9b7
Page 1 of 1