Home > List all groups > List all tools > List all groups using tool PsExec

Threat Group Cards: A Threat Actor Encyclopedia

Names	PsExec
Category	Tools
Type	Remote command
Description	PsExec is a free Microsoft tool that can be used to execute a program on another computer. It is used by IT administrators and attackers and is part of SysInternals.
Information	<https://docs.microsoft.com/en-us/sysinternals/downloads/psexec> <https://www.bleepingcomputer.com/news/security/new-psexec-spinoff-lets-hackers-bypass-network-security-defenses/>
MITRE ATT&CK	<https://attack.mitre.org/software/S0029/>
AlienVault OTX	<https://otx.alienvault.com/browse/pulses?q=tag:psexec>

Last change to this tool card: 18 November 2022

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Allanite	[Unknown]	2017
	ALPHV, BlackCat Gang	[Unknown]	2021-Mar 2024
	↳ Subgroup: Scattered Spider	[Unknown]	2022-Aug 2025
	Antlion		2011
	APT 20, Violin Panda		2014-2017
	Boss Spider, Gold Lowell		2015-Nov 2018
	Carbanak, Anunak		2013-Apr 2023
	CostaRicto	[Unknown]	2017
	Dalbit		2022
	Emissary Panda, APT 27, LuckyMouse, Bronze Union		2010-Aug 2023
	Energetic Bear, Dragonfly		2010-Mar 2022
	Gallium		2018-Jun 2022
	Goblin Panda, Cycldek, Conimes		2013-Jun 2020
	IAmTheKing		2018
	Indrik Spider		2007-Oct 2024
	Kimsuky, Velvet Chollima		2012-Aug 2025
	LockBit Gang	[Unknown]	2019-May 2025
	Lotus Blossom, Spring Dragon, Thrip		2012-Aug 2024
	OPERA1ER	[Unknown]	2016-Jul 2023
	Operation Harvest		2016
	Salt Typhoon, GhostEmperor		2020-Feb 2025
	Stone Panda, APT 10, menuPass		2006-Mar 2025
	TA2101, Maze Team	[Unknown]	2019-Feb 2024
	TaskMasters		2010-May 2021
	TEMP.Veles		2014-Mar 2022
	Tiny Spider	[Unknown]	2015-2017
	ToddyCat		2020-2024
	Traveling Spider	[Unknown]	2019-Mar 2021
	Turla, Waterbug, Venomous Bear		1996-2024
	UNC215		2019
	Wizard Spider, Gold Blackburn		2014-May 2025

31 groups listed (31 APT, 0 other, 0 unknown)

APT groups