S0166Windows

S0166RemoteCMD

Platforms
1
ATT&CK
14.1
References
2

Description

[RemoteCMD](https://attack.mitre.org/software/S0166) is a custom tool used by [APT3](https://attack.mitre.org/groups/G0022) to execute commands on a remote system similar to SysInternal's PSEXEC functionality. (Citation: Symantec Buckeye) Documented platforms: Windows. Attributed to ATT&CK group: APT3. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupAPT3g002295%live

References

  1. https://attack.mitre.org/software/S0166
  2. http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
xCmd
Software
MCMD
Software
RemoteUtilities
Software
PsExec
Software
OSInfo
Software
Remcos
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.